Detections
Analytics

1.229 WN16-SO-000290

Information

Windows Server 2016 must be configured to prevent anonymous users from having the same permissions as the Everyone group.

GROUP ID: V-225047
RULE ID: SV-225047r991589

Access by anonymous users must be restricted. If this setting is enabled, anonymous users have the same rights and permissions as the built-in Everyone group. Anonymous users must not have these permissions or rights.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Network access: Let everyone permissions apply to anonymous users'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10)

Plugin: Windows

Control ID: 1f96c930aa99e435e4591b55a4178480ec33f2b3ed5f74d609fff650c3a9ddaf