acc05

c-acc-05-service-logon-accounts (Enabled)

Checks all services to ensure no user accounts are assigned. If specific application service accounts are required then they should be domain level accounts (not local) and restricted from interactice access by policy.

---

Input Values

• IgnoreTheseUsers - List of known user or groups accounts to ignore

Example

IgnoreTheseUsers = ('NT AUTHORITY\\NetworkService', 'NT AUTHORITY\\LocalService', 'LocalSystem')

Input Descriptions

• None

---

Result And Messages

• PASS
  No services found running under a local accounts

• WARNING

• FAIL
  One or more services was found to be running under local accounts

• MANUAL

• NA

---

Applies To

• All Servers

---

Required Functions

• None