Windows Server 2022 must not allow anonymous enumeration of Security Account Manager (SAM) accounts.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-254466	WN22-SO-000220	SV-254466r849214_rule		High

Description
Anonymous enumeration of SAM accounts allows anonymous logon users (null session connections) to list all accounts names, thus providing a list of potential points to attack the system.

STIG	Date
Microsoft Windows Server 2022 Security Technical Implementation Guide	2022-08-25

Details

Check Text ( C-57951r849212_chk )
If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SYSTEM\CurrentControlSet\Control\Lsa\ Value Name: RestrictAnonymousSAM Value Type: REG_DWORD Value: 0x00000001 (1)

Fix Text (F-57902r849213_fix)
Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> Network access: Do not allow anonymous enumeration of SAM accounts to "Enabled".