SV-25023r2: The built-in administrator account must be renamed. | Windows 7 Security Technical Implementation Guide

Loading benchmark…

Assessment Title

Rule Text

The built-in administrator account must be renamed.

Description

Discussion Text

The built-in administrator account is a well-known account subject to attack. Renaming this account to an unidentified name improves the protection of this account and the system.

How this relates to the STIG checklist: STIG vs SCAP benchmark.

IA Controls

NIST SP 800-53

Not mappedCCI-000366CCE-8484-8

Additional Details

Responsibility

System Administrator

References

DPMS Target Windows 7 DISA DPMS Target Windows 7 1712

SCC Automation Reference

The reconstructed evaluation script behind this rule's OVAL check(s) — every module a compound check combines, with this rule's own concrete values and DISA's SCC tool's real per-module mechanism curated from static teardown of SCC releases.

# Windows PowerShell
# Reconstructed from oval:mil.disa.fso.windows:def:3677
# The built-in administrator account must be renamed.
# Per-module read mechanism curated from static teardown of DISA's SCC tool
# (SCAP Compliance Checker) -- see the SCC Automation Reference above.
#
# MANUAL REVIEW REQUIRED -- the module(s) below could not be reconstructed
# into working code from curated SCC reference data, and are excluded from
# the automated result:
#   - user_object (user_test) -- Verifies 'Accounts: Rename administrator account' is set to a value other than 'Administrator': no extractor for field "user"

Write-Output "MANUAL REVIEW REQUIRED -- see notes above; no part of this check could be automated"

Remediation

Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> "Accounts: Rename administrator account" to a name other than "Administrator".