+SYS.2.2.2.A7 Use of Windows User Account Control (S)

SYS.2.2.2.A7 Use of Windows User Account Control (S)

In order to support restrictive rights assignment, User Account Control (UAC) SHOULD be enabled. For standard users, it SHOULD be defined that password prompts will be rejected automatically for higher rights. For administrator accounts, a balance between user-friendliness and security SHOULD be achieved when configuring UAC. This decision SHOULD be documented and the corresponding settings SHOULD be configured. It SHOULD be checked regularly whether the corresponding rights are still required and whether they should be adapted or withdrawn accordingly.

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe

3. Reglementări asociate

Reglementări

Tichete legate

Legături
blocks G 0.22 Manipulation of Information
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.46 Loss of Integrity of Sensitive Information