Detections
Analytics

1.210 WN11-SO-000145

Information

Anonymous enumeration of SAM accounts must not be allowed.

GROUP ID: V-253453
RULE ID: SV-253453r991589

Anonymous enumeration of SAM accounts allows anonymous log on users (null session connections) to list all accounts names, thus providing a list of potential points to attack the system.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Network access: Do not allow anonymous enumeration of SAM accounts'

to 'Enabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-253453r991589_rule, STIG-ID|WN11-SO-000145, Vuln-ID|V-253453

Plugin: Windows

Control ID: 1f0ad312d14ce02e7aa54a700f83fa19d3e806e145c2075f281d494258c67e3e