Detections
Analytics

1.136 WN11-CC-000130

Information

Local users on domain-joined computers must not be enumerated.

GROUP ID: V-253379
RULE ID: SV-253379r958478

The username is one part of logon credentials that could be used to gain access to a system. Preventing the enumeration of users limits this information to authorized personnel.

Solution

This requirement is applicable to domain-joined systems, for standalone systems this is NA.

Configure the policy value for

Computer Configuration >> Administrative Templates >> System >> Logon >> 'Enumerate local users on domain-joined computers'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-253379r958478_rule, STIG-ID|WN11-CC-000130, Vuln-ID|V-253379

Plugin: Windows

Control ID: ba82a5bca92dce74ba864844ee48e7ea4a80799fd9d6137e3d5c14057f12862a