Title

User Network Sharing (Cat II impact)

Discussion

This check verifies that users are prevented from sharing files.

Check Content

Note: This setting is in HKEY_CURRENT_USER, not HKEY_LOCAL_MACHINE If the following registry value doesn’t exist or is not configured as specified, this is a finding: Registry Hive: HKEY_CURRENT_USER Subkey: \Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ Value Name: NoInPlaceSharing Type: REG_DWORD Value: 1

Fix Text

Note: This setting is under USER Configuration not COMPUTER Configuration Configure the policy value for User Configuration -> Administrative Templates -> Windows Components -> Network Sharing “Prevent users from sharing files within their profile” to “Enabled”.

Additional Identifiers

Rule ID: SV-16666r1_rule

Vulnerability ID: V-15727

Group Title: User Network Sharing

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.