Anonymous enumeration of shares must not be allowed.
An XCCDF Rule
Description
Allowing anonymous logon users (null session connections) to list all account names and enumerate all shared resources can provide a map of potential points to attack the system.
- ID
- SV-225046r958524_rule
- Version
- WN16-SO-000270
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> "Network access: Do not allow anonymous enumeration of SAM accounts and shares" to "Enabled".