Detections
Analytics

1.211 WN11-SO-000150

Information

Anonymous enumeration of shares must be restricted.

GROUP ID: V-253454
RULE ID: SV-253454r1137695

Allowing anonymous logon users (null session connections) to list all account names and enumerate all shared resources can provide a map of potential points to attack the system.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Network access: Do not allow anonymous enumeration of SAM accounts and shares'

to 'Enabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-4, CCI|CCI-001090, Rule-ID|SV-253454r1137695_rule, STIG-ID|WN11-SO-000150, Vuln-ID|V-253454

Plugin: Windows

Control ID: 119aae24024316f4f2d736f185538132597551448ecd0628e7f6318d5640f422