Detections
Analytics
WN16-CC-000530 - The Windows Remote Management (WinRM) service must not use Basic authentication.
Information
Basic authentication uses plain-text passwords that could be used to compromise a system. Disabling Basic authentication will reduce this potential.Solution
Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Remote Management (WinRM) >> WinRM Service >> 'Allow Basic authentication' to 'Disabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2016_V2R10_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2016 STIG v2r10
Category: MAINTENANCE
References: 800-53|MA-4c., CAT|I, CCI|CCI-000877, Rule-ID|SV-224961r958510_rule, STIG-ID|WN16-CC-000530, STIG-Legacy|SV-88263, STIG-Legacy|V-73599, Vuln-ID|V-224961
Plugin: Windows
Control ID: 807f1088aa794dab12dd70f5153b0705872b80fdbad74722407af2ca396c3328