Detections
Analytics

1.235 WN22-SO-000280

Information

Windows Server 2022 must prevent PKU2U authentication using online identities.

GROUP ID: V-254472
RULE ID: SV-254472r991589

PKU2U is a peer-to-peer authentication protocol. This setting prevents online identities from authenticating to domain-joined systems. Authentication will be centrally managed with Windows user accounts.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> Network security: Allow PKU2U authentication requests to this computer to use online identities to 'Disabled'

See Also

https://workbench.cisecurity.org/benchmarks/22357

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-254472r991589_rule, STIG-ID|WN22-SO-000280, Vuln-ID|V-254472

Plugin: Windows

Control ID: fbfe4fd3e89ab56edc8a1af2be21e739999e8f91ec34b0db224e78235cb4fb24