Detections
Analytics

1.209 WN11-SO-000140

Information

Anonymous SID/Name translation must not be allowed.

GROUP ID: V-253452
RULE ID: SV-253452r991589

Allowing anonymous SID/Name translation can provide sensitive information for accessing a system. Only authorized users must be able to perform such translations.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Network access: Allow anonymous SID/Name translation'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-253452r991589_rule, STIG-ID|WN11-SO-000140, Vuln-ID|V-253452

Plugin: Windows

Control ID: c2949aef6fab5721d9004a7589670e45a47a10a9bb0d6f9e46d9f8a90cad6890