Detections
Analytics

1.148 WN11-CC-000200

Information

Administrator accounts must not be enumerated during elevation.

GROUP ID: V-253391
RULE ID: SV-253391r958518

Enumeration of administrator accounts when elevating can provide part of the logon information to an unauthorized user. This setting configures the system to always require users to type in a username and password to elevate a running application.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Credential User Interface >> 'Enumerate administrator accounts on elevation'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-3, CCI|CCI-001084, Rule-ID|SV-253391r958518_rule, STIG-ID|WN11-CC-000200, Vuln-ID|V-253391

Plugin: Windows

Control ID: 70f1e318bea2f58cacdf2a057fe32f21cc78fe81ed16eb431fa44d5983af5e3f