Detections
Analytics

1.128 WN10-CC-000130

Information

Local users on domain-joined computers must not be enumerated.

GROUP ID: V-220820RULE ID: SV-220820r958478

The username is one part of logon credentials that could be used to gain access to a system. Preventing the enumeration of users limits this information to authorized personnel.

Solution

This requirement is applicable to domain-joined systems. For standalone or nondomain-joined systems, this is NA.

Configure the policy value for

Computer Configuration >> Administrative Templates >> System >> Logon >> 'Enumerate local users on domain-joined computers'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/23869

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-220820r958478_rule, STIG-ID|WN10-CC-000130, Vuln-ID|V-220820

Plugin: Windows

Control ID: 822627e8347b44a3bb0d6dd9293514a5534b37c73f9438a2d7cdb6fc9cf1dec7