CIS ISO Essentials

No unused user accounts are present

How to remove user accounts

Open System Preferences, then click Users & Groups.
Review and remove unnecessary user accounts by clicking the "i" icon and Delete User button.

How to reset from Terminal

Open Terminal.
Run dscl . -list /Users | grep -v '^_ '.

Time to fix

< 10m

What

All laptops, computers, servers, tablets, mobile devices, and cloud services should only contain user accounts necessary for business operations.

The check will show if there is a user account that hasn't been logged-into in the past 30 days.

Why you should remove unused accounts

Unused and old accounts may have weak or compromised passwords, or they could be forgotten and not receive important security updates. This can make them an easy target for unauthorized access or exploitation by malicious actors.