Check: 3.019
Win2k8 R2 Audit:
3.019
(in version v1 r8)
Title
Anonymous enumeration of SAM accounts will not be allowed. (Cat I impact)
Discussion
This is a Category 1 finding as it allows anonymous logon users (null session connections) to list all account names, thus providing a list of potential points to attack the system.
Check Content
Fix Text
Configure the policy values for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “Network access: Do not allow anonymous enumeration of SAM accounts” to “Enabled".
Additional Identifiers
Rule ID: SV-33732r1_rule
Vulnerability ID: V-26283
Group Title: Restrict Anonymous SAM Enumeration
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| No CCIs are assigned to this check |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| No controls are assigned to this check |