Detections
Analytics

WN11-SO-000140 - Anonymous SID/Name translation must not be allowed.

Information

Allowing anonymous SID/Name translation can provide sensitive information for accessing a system. Only authorized users must be able to perform such translations.

Solution

Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Network access: Allow anonymous SID/Name translation' to 'Disabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R11_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-253452r1268251_rule, STIG-ID|WN11-SO-000140, Vuln-ID|V-253452

Plugin: Windows

Control ID: 63b29561b28089032f337994588b1b028b768791e4c954125ce93317a546b4bc