WN11-CC-000330 - The Windows Remote Management (WinRM) client must not use Basic authentication.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version


Basic authentication uses plain text passwords that could be used to compromise a system.


Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Remote Management (WinRM) >> WinRM Client >> 'Allow Basic authentication' to 'Disabled'.

See Also


Item Details

References: CAT|I, CCI|CCI-000877, Rule-ID|SV-253416r829332_rule, STIG-ID|WN11-CC-000330, Vuln-ID|V-253416

Plugin: Windows

Control ID: bef335d0735f70dd357166015338978582ccb5abef83b64b5563af3047eb12a1