Detections
Analytics

1.108 WN10-CC-000040

Information

Insecure logons to an SMB server must be disabled.

GROUP ID: V-220802RULE ID: SV-220802r991589

Insecure guest logons allow unauthenticated access to shared folders. Shared resources on a system must require authentication to establish proper access.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Network >> Lanman Workstation >> 'Enable insecure guest logons'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/23869

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-220802r991589_rule, STIG-ID|WN10-CC-000040, Vuln-ID|V-220802

Plugin: Windows

Control ID: f68f0280fe11e0980ed2b10b1e94c8a422abd29ff9b340f62dc3e401aa49d779