SV-271349r1108938_rule
V-271349
SRG-APP-000380-DB-000360
SQLI-22-011500
CAT II
10
Remove users from the local Administrators group who are not authorized.
Obtain a list of users who have privileged access to the server via the local administrators group.
1. Launch lusrmgr.msc.
2. Select "Groups".
3. Double-click "Administrators".
Alternatively, execute the following command in PowerShell:
net localgroup administrators
Check the server documentation to verify the users returned are authorized.
If the users are not documented and authorized, this is a finding.
V-271349
False
SQLI-22-011500
Obtain a list of users who have privileged access to the server via the local administrators group.
1. Launch lusrmgr.msc.
2. Select "Groups".
3. Double-click "Administrators".
Alternatively, execute the following command in PowerShell:
net localgroup administrators
Check the server documentation to verify the users returned are authorized.
If the users are not documented and authorized, this is a finding.
M
5677