acc03

acc-03-local-admins (Enabled)

Check the local administrators group to ensure no non-standard accounts exist. If there is a specific application requirement for local administration access then these need to be well documented.

---

Input Values

• IgnoreTheseUsers - "LIST" - Known user or group accounts to ignore

Example

IgnoreTheseUsers = @('Domain Admins', 'Enterprise Admins')

Input Descriptions

• None

---

Result And Messages

• PASS
  No local administrators found

• WARNING
  This is a work group server, is this correct.?

• FAIL
  One or more local administrator accounts exist

• MANUAL

• NA

---

Applies To

• All Servers

---

Required Functions

• None