3.062 - Anonymous SID/Name translation is allowed.

Information

This is a Category 1 finding because this setting controls the ability of users or process that have authenticated as anonymous users to perform SID/Name translation. This setting should be disabled, as only authorized users should be able to perform such translations.

Solution

Configure the system to disable anonymous SID/Name translation.

See Also

http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-29701r1_rule, STIG-ID|3.062, Vuln-ID|V-3337

Plugin: Windows

Control ID: 5aac85d8f76cd4bcee68d7d6b402c4c3e177fe93812b2871276480402e8b665c