3.072 - The system is not configured to use the Classic security model.

Information

Windows includes two network-sharing security models - Classic and Guest only. With the classic model, local accounts must be password protected; otherwise, anyone can use guest user accounts to access shared system resources.

Solution

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> 'Network access- Sharing and security model for local accounts' to 'Classic - local users authenticate as themselves'.

See Also

http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-4, CAT|II, CCI|CCI-001090, Rule-ID|SV-29266r1_rule, STIG-ID|3.072, Vuln-ID|V-3378

Plugin: Windows

Control ID: 0cb3bafa73f4383600b071043182833365e45aa743748080f15ad8773c649e0f