Detections
Analytics

Enumerate local users on domain-joined computers

Information

This policy setting allows local users to be enumerated on domain-joined computers. If you enable this policy setting Logon UI will enumerate all local users on domain-joined computers.

If you disable or do not configure this policy setting the Logon UI will not enumerate local users on domain-joined computers.

Solution

Policy Path: System\Logon
Policy Setting Name: Enumerate local users on domain-joined computers

See Also

https://techcommunity.microsoft.com/blog/microsoft-security-baselines/windows-11-version-25h2-security-baseline/4456231

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10)

Plugin: Windows

Control ID: 4246fcc42dcdc9f00bf1b41d18148513312a0058c062b1c2d14576103b3cafa2