+SYS.2.2.2.A7 Use of Windows User Account Control (S)

SYS.2.2.2.A7 Use of Windows User Account Control (S)

In order to support restrictive rights assignment, User Account Control (UAC) SHOULD be enabled. For standard users, it SHOULD be defined that password prompts will be rejected automatically for higher rights. For administrator accounts, a balance between user-friendliness and security SHOULD be achieved when configuring UAC. This decision SHOULD be documented and the corresponding settings SHOULD be configured. It SHOULD be checked regularly whether the corresponding rights are still required and whether they should be adapted or withdrawn accordingly.

1. Visão geral

1.1 Referências

1.2 Requisitos identificados

1.3 Regulamentos relacionados

2. Requisitos identificados

Requisitos

3. Regulamentos relacionados

Regulamentos

Pedidos ligados

Ligações
blocks G 0.22 Manipulation of Information
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.46 Loss of Integrity of Sensitive Information