Detections
Analytics

1.231 WN22-SO-000240

Information

Windows Server 2022 must be configured to prevent anonymous users from having the same permissions as the Everyone group.

GROUP ID: V-254468
RULE ID: SV-254468r991589

Access by anonymous users must be restricted. If this setting is enabled, anonymous users have the same rights and permissions as the built-in Everyone group. Anonymous users must not have these permissions or rights.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> Network access: Let Everyone permissions apply to anonymous users to 'Disabled'

See Also

https://workbench.cisecurity.org/benchmarks/22357

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-254468r991589_rule, STIG-ID|WN22-SO-000240, Vuln-ID|V-254468

Plugin: Windows

Control ID: afac2fbe3968946961cb9198beefa55049d305acc6acd417dd7d128dbe7f897f