Detections
Analytics

1.101 WN16-CC-000080

Information

Insecure logons to an SMB server must be disabled.

GROUP ID:V-224920
RULE ID:SV-224920r991589

Insecure guest logons allow unauthenticated access to shared folders. Shared resources on a system must require authentication to establish proper access.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Network >> Lanman Workstation >> 'Enable insecure guest logons'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-224920r991589_rule, STIG-ID|WN16-CC-000080

Plugin: Windows

Control ID: db0414ccafd4e6c6062894d3715df979ac9a02c42f058d67a78c853e25f5db6c