acc03

c-acc-03-local-admins (Enabled)

Check the local administrators group to ensure no non-standard accounts exist. If there is a specific application requirement for local administration access then these need to be well documented.

---

Input Values

• IgnoreTheseUsers - List of know user or groups accounts to ignore

Example

IgnoreTheseUsers = ('Domain Admins', 'Enterprise Admins')

Input Descriptions

• None

---

Result And Messages

• PASS
  No local administrators found

• WARNING
  This is a workgroup server, is this correct.?

• FAIL
  One or more local administrator accounts exist

• MANUAL

• NA

---

Applies To

• All Servers

---

Required Functions

• None