Detections
Analytics

WN11-SO-000140 - Anonymous SID/Name translation must not be allowed.

Information

Allowing anonymous SID/Name translation can provide sensitive information for accessing a system. Only authorized users must be able to perform such translations.

Solution

Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Network access: Allow anonymous SID/Name translation' to 'Disabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R7_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-253452r991589_rule, STIG-ID|WN11-SO-000140, Vuln-ID|V-253452

Plugin: Windows

Control ID: 9463f1062b0a8cfd07ddeef278543fefb5f9ce1963c0f204d2397e6ddda6d04e