Disabled account

Risk Level: Low risk vulnerability  Low

Check or Attack Name: Disabled Account

Platforms: Windows NT, Solaris: 2.5.1
Description:

A disabled user account has been detected. The administrator should periodically review and remove any disabled accounts that are no longer needed. An attacker could re-enable a disabled account.

Remedy:

Remove the account if it is not needed.

To remove an account, follow these steps:

  1. Open User Manager. From the Windows NT Start menu, select Programs, Administrative Tools (Common), User Manager.
  2. Select the user account to be removed.
  3. Press Delete and confirm the delete operation.
References:

X-Force Logo
Know Your Risks