AC-02(02) Automated Temporary and Emergency Account Management
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
Automated Temporary and Emergency Account Management
Control
Automatically [Selection: remove; disable] temporary and emergency accounts after [Assignment: time period].
Discussion
Management of temporary and emergency accounts includes the removal or disabling of such accounts automatically after a predefined time period rather than at the convenience of the system administrator. Automatic removal or disabling of accounts provides a more consistent implementation.
Parameters
ac-02.02_odp.01: [remove; disable]
ac-02.02_odp.02: time period
Assessment objective
AC-02(02) temporary and emergency accounts are automatically [Selection: remove; disable] after [Assignment: time period].
STIG rules that implement this control 11
Apple macOS 15 (Sequoia) V1R8
- APPL-15-000012 CAT II The macOS system must automatically remove or disable temporary or emergency user accounts within 72 hours.
Apple macOS 26 (Tahoe) V1R4
- APPL-26-000012 CAT II The macOS system must automatically remove or disable temporary or emergency user accounts within 72 hours.
Application Security and Development V6R5
- APSC-DV-000300 CAT II The application must automatically remove or disable temporary user accounts 72 hours after account creation.
Canonical Ubuntu 22.04 LTS V2R10
- UBTU-22-411040 CAT II Ubuntu 22.04 LTS must automatically expire temporary accounts within 72 hours.
Canonical Ubuntu 24.04 LTS V1R7
- UBTU-24-200250 CAT II Ubuntu 24.04 LTS must automatically remove or disable emergency accounts after 72 hours.
Microsoft Windows Server 2022 V2R11
- WN22-00-000300 CAT II Windows Server 2022 must automatically remove or disable temporary user accounts after 72 hours.
- WN22-00-000310 CAT II Windows Server 2022 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.
Microsoft Windows Server 2025 V1R4
- WN25-00-000300 CAT II Windows Server 2025 must automatically remove or disable temporary user accounts after 72 hours.
- WN25-00-000310 CAT II Windows Server 2025 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.
Red Hat Enterprise Linux 10 V1R3
- RHEL-10-600140 CAT II RHEL 10 must automatically expire temporary accounts within 72 hours.
Red Hat Enterprise Linux 9 V2R10
- RHEL-09-411040 CAT II RHEL 9 must automatically expire temporary accounts within 72 hours.