Rule Name:  Accounts used by application pools or service identities are in the local machine Administrators group. Summary:  A user account that is used by application pools or services must have permissions of a domain user account and must not… Read More ›