STIGQter: STIG Summary: Unified Endpoint Management Server Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 20 Nov 2020:

The UEM server must automatically remove or disable temporary user accounts after 72 hours if supported by the UEM server.

DISA Rule

SV-234287r617355_rule

Vulnerability Number

V-234287

Group Title

SRG-APP-000024

Rule Version

SRG-APP-000024-UEM-000013

Severity

CAT II

CCI(s)

• CCI-000016 - The information system automatically removes or disables temporary accounts after an organization-defined time period for each type of account.

Weight

10

Fix Recommendation

Configure the UEM server to automatically remove or disable temporary user accounts after 72 hours, if supported by the UEM server.

Check Contents

Requirement is Not Applicable when the UEM server is configured to use DoD Central Directory Service for administrator account authentication.

Verify the UEM server automatically removes or disables temporary user accounts after 72 hours, if supported by the UEM server.

If the UEM server does not automatically remove or disable temporary user accounts after 72 hours, if supported by the UEM server, this is a finding.

Vulnerability Number

V-234287

Documentable

False

Rule Version

SRG-APP-000024-UEM-000013

Severity Override Guidance

Requirement is Not Applicable when the UEM server is configured to use DoD Central Directory Service for administrator account authentication.

Verify the UEM server automatically removes or disables temporary user accounts after 72 hours, if supported by the UEM server.

If the UEM server does not automatically remove or disable temporary user accounts after 72 hours, if supported by the UEM server, this is a finding.

Check Content Reference

M

Target Key

5269

Comments