search

windows-admins / ConfigMgr

GNU General Public License v3.0
225 stars 57 forks source link

CI for local accounts #73

Closed Ebag333 closed 3 years ago

Ebag333 commented 5 years ago

Disable all local accounts and randomize passwords

theaquamarine commented 5 years ago

It'll need to avoid the account managed by LAPS, if that's in use. If LAPS is in use, and what account it's managing, is stored in the registry, so that's easy enough to check. It'd probably be worth ensuring the CSE's actually installed, too. https://getadmx.com/?Category=LAPS