Detections
Analytics

WN11-CC-000130 - Local users on domain-joined computers must not be enumerated.

Information

The username is one part of logon credentials that could be used to gain access to a system. Preventing the enumeration of users limits this information to authorized personnel.

Solution

This requirement is applicable to domain-joined systems, for standalone systems this is NA.

Configure the policy value for Computer Configuration >> Administrative Templates >> System >> Logon >> 'Enumerate local users on domain-joined computers' to 'Disabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R7_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-253379r958478_rule, STIG-ID|WN11-CC-000130, Vuln-ID|V-253379

Plugin: Windows

Control ID: 7e9d1270387267c12693d47f3d07aa60bfd83df8818a4b98ac9da573c20e270d