Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add check for allowadministratorlockout #380

Closed
TuemmlerKelch opened this issue Sep 13, 2023 · 2 comments
Closed

Add check for allowadministratorlockout #380

TuemmlerKelch opened this issue Sep 13, 2023 · 2 comments
Assignees
@SteffenWinternheimer @TuemmlerKelch
Labels
enhancement New feature or request minor Incremental updates and enhancements for improved functionality without major changes.
Milestone
5.9.0

Comments

@TuemmlerKelch
Copy link
Collaborator

MS added a new account lockout policy that allows the builtin administrator account to be locked, which was previously not possible and made this account prone to brute force attacks.

Please find out if and how we can check this
@TuemmlerKelch TuemmlerKelch added the enhancement New feature or request label Sep 13, 2023
@TuemmlerKelch
Copy link
Collaborator Author

The check can be implemented like any other security option looking at ['System Access']["AllowAdministratorLockout"]

@TuemmlerKelch TuemmlerKelch added this to the 5.9.0 milestone Mar 21, 2024
@TuemmlerKelch
Copy link
Collaborator Author

Affected Benchmarks
CIS Microsoft Windows Server 2022 2.0.0
CIS Microsoft Windows Server 2019 2.0.0
CIS Microsoft Windows 10 2.0.0
CIS Microsoft Windows Server 2016 2.0.0

Merged
@TuemmlerKelch TuemmlerKelch added the minor Incremental updates and enhancements for improved functionality without major changes. label Mar 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@SteffenWinternheimer SteffenWinternheimer

@TuemmlerKelch TuemmlerKelch

Labels
enhancement New feature or request minor Incremental updates and enhancements for improved functionality without major changes.
Projects
None yet
Milestone
5.9.0
Development

No branches or pull requests
2 participants
@SteffenWinternheimer @TuemmlerKelch