1.2.3.2.6 Set 'Enumerate local users on domain-joined computers' to 'Disabled'

Information

This policy setting allows local users to be enumerated on domain-joined computers.

Solution

Make sure 'Enumerate local users on domain-joined computers' is set to 'Disabled'

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CSCv6|16.9

Plugin: Windows

Control ID: 7103d02126b4ae949ef76a1b95d1780fe54fe5ecdeaa0ba58b74096099cd833c