3.030 - Anonymous access to the registry must be restricted.
The registry is integral to the function, security, and stability of the Windows system. Some processes may require anonymous access to the registry. This must be limited to properly protect the system.
Maintain the default permissions of the following registry key- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\ Administrators - Full Backup Operators - Special (Special = Query Value, Enumerate Subkeys, Notify, Read Control (effectively = Read) - This key only) LOCAL SERVICE - Read