Title

NTLM will be prevented from falling back to a Null session. (Cat II impact)

Discussion

This setting prevents NTLM from falling back to a Null (unauthenticated) session.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “Network Security: Allow LocalSystem NULL session fallback” to “Disabled”.

Additional Identifiers

Rule ID: SV-32446r1_rule

Vulnerability ID: V-21952

Group Title: NTLM NULL Session Fallback

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.