WN10-SO-000140 - Anonymous SID/Name translation must not be allowed.

Information

Allowing anonymous SID/Name translation can provide sensitive information for accessing a system. Only authorized users must be able to perform such translations.

Solution

Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Network access: Allow anonymous SID/Name translation' to 'Disabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-220928r991589_rule, STIG-ID|WN10-SO-000140, STIG-Legacy|SV-78229, STIG-Legacy|V-63739, Vuln-ID|V-220928

Plugin: Windows

Control ID: 99d617defcb53c77f640b685d70da108c3f49f1223e9ee8e3c61187e24910d9e