Detections
Analytics

1.191 WN16-MS-000030

Information

Local users on domain-joined computers must not be enumerated.

GROUP ID:V-225009
RULE ID:SV-225009r958478

The username is one part of logon credentials that could be used to gain access to a system. Preventing the enumeration of users limits this information to authorized personnel.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> System >> Logon >> 'Enumerate local users on domain-joined computers'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-225009r958478_rule, STIG-ID|WN16-MS-000030

Plugin: Windows

Control ID: 84f64b74a069abc593f6454807ab18660d16b2f50d74f66399a88eda21a933bb