SV-225560r569185_rule
V-225560
SRG-OS-000080-GPOS-00048
WN12-UR-000020-MS
CAT II
10
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment -> "Deny log on locally" to include the following:
Domain Systems Only:
Enterprise Admins Group
Domain Admins Group
All Systems:
Guests Group
Verify the effective setting in Local Group Policy Editor.
Run "gpedit.msc".
Navigate to Local Computer Policy -> Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment.
If the following accounts or groups are not defined for the "Deny log on locally" user right, this is a finding:
Domain Systems Only:
Enterprise Admins Group
Domain Admins Group
All Systems:
Guests Group
V-225560
False
WN12-UR-000020-MS
Verify the effective setting in Local Group Policy Editor.
Run "gpedit.msc".
Navigate to Local Computer Policy -> Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment.
If the following accounts or groups are not defined for the "Deny log on locally" user right, this is a finding:
Domain Systems Only:
Enterprise Admins Group
Domain Admins Group
All Systems:
Guests Group
M
4214