Detections
Analytics

1.233 WN22-SO-000230

Information

Windows Server 2022 must not allow anonymous enumeration of shares.

GROUP ID: V-254467
RULE ID: SV-254467r1137695

Allowing anonymous logon users (null session connections) to list all account names and enumerate all shared resources can provide a map of potential points to attack the system.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> Network access: Do not allow anonymous enumeration of SAM accounts and shares to 'Enabled'

.

See Also

https://workbench.cisecurity.org/benchmarks/28297

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-4, CCI|CCI-001090, Rule-ID|SV-254467r1137695_rule, STIG-ID|WN22-SO-000230, Vuln-ID|V-254467

Plugin: Windows

Control ID: 428581615ea464ff83023c82f5fded2ee8ca4359ee09cabc915bdf7319378c1c