Detections
Analytics

1.116 WN11-CC-000040

Information

Insecure logons to an SMB server must be disabled.

GROUP ID: V-253360
RULE ID: SV-253360r991589

Insecure guest logons allow unauthenticated access to shared folders. Shared resources on a system must require authentication to establish proper access.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Network >> Lanman Workstation >> 'Enable insecure guest logons'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-253360r991589_rule, STIG-ID|WN11-CC-000040, Vuln-ID|V-253360

Plugin: Windows

Control ID: f71df83e8a79d65c066baf510d9b379d0bcd50ff87f407912357161bbcf52b50