Detections
Analytics

1.231 WN19-SO-000240

Information

Windows Server 2019 must be configured to prevent anonymous users from having the same permissions as the Everyone group.

GROUP ID:V-205915
RULE ID:SV-205915r991589

Access by anonymous users must be restricted. If this setting is enabled, anonymous users have the same rights and permissions as the built-in Everyone group. Anonymous users must not have these permissions or rights.

Solution

Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Network access: Let Everyone permissions apply to anonymous users' to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/22176

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10)

Plugin: Windows

Control ID: 1548130986974021d124c76029a74f8ce92a9b9b336e10e32498df3d86c55f7e