Detections
Analytics

1.210 WN10-SO-000160

Information

The system must be configured to prevent anonymous users from having the same rights as the Everyone group.

GROUP ID: V-220931RULE ID: SV-220931r991589

Access by anonymous users must be restricted. If this setting is enabled, then anonymous users have the same rights and permissions as the built-in Everyone group. Anonymous users must not have these permissions or rights.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Network access: Let Everyone permissions apply to anonymous users'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/23869

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-220931r991589_rule, STIG-ID|WN10-SO-000160, Vuln-ID|V-220931

Plugin: Windows

Control ID: cf351e40d5738bece974eaa7f82444ef5a74bafa6dbffa88e5d0edf44df72a89