Non-system-created file shares on a system must limit access to groups that require it.
An XCCDF Rule
Description
Shares on a system provide network access. To prevent exposing sensitive information, where shares are necessary, permissions must be reconfigured to give the minimum access to accounts that require it.
- ID
- SV-224841r958524_rule
- Version
- WN16-00-000250
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
If a non-system-created share is required on a system, configure the share and NTFS permissions to limit access to the specific groups or accounts that require it.
Remove any unnecessary non-system-created shares.