STIGUI
V-263528CAT II — Medium severitySV-263528r982383_rule

AAA Services must be configured to disable accounts when the accounts are no longer associated to a user.

Rule version SRG-APP-000705-AAA-000110 · STIG v2 · 2026-09-01

Discussion

Disabling expired, inactive, or otherwise anomalous accounts supports the concepts of least privilege and least functionality, which reduce the attack surface of the system.

Check

Verify AAA Services is configured to disable accounts when the accounts are no longer associated to a user.

If AAA Services is not configured to disable accounts when the accounts are no longer associated to a user, this is a finding.

Fix

Configure AAA Services to disable accounts when the accounts are no longer associated to a user.

Identifiers

Group ID
V-263528
Group title
SRG-APP-000705
Rule ID
SV-263528r982383_rule
Check ID
C-67428r982382_chk
Fix ID
F-67336r981594_fix