Services using Local System that use negotiate when reverting to NTLM authentication will use the computer identity vs. authenticating anonymously.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-21951 | 3.151 | SV-32445r1_rule | ECSC-1 | Medium |
| Description |
|---|
| This setting ensures that services using Local System that use negotiate when reverting to NTLM authentication will use the computer identity vs. authenticating anonymously. |
| STIG | Date |
|---|---|
| Win2k8 R2 Audit | 2013-06-10 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-28856r1_fix) |
|---|
| Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “Network Security: Allow Local System to use computer identity for NTLM” to “Enabled”. |