Detections
Analytics

1.101 WN19-CC-000070

Information

Windows Server 2019 insecure logons to an SMB server must be disabled.

GROUP ID:V-205861
RULE ID:SV-205861r991589

Insecure guest logons allow unauthenticated access to shared folders. Shared resources on a system must require authentication to establish proper access.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Network >> Lanman Workstation >> 'Enable insecure guest logons' to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/22176

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-205861r991589_rule, STIG-ID|WN19-CC-000070

Plugin: Windows

Control ID: d36e2a5f9b9888d792e81f9238b718d15cec1c83499b2dfcac059ca28e795d06