Anonymous enumeration of shares will be restricted.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1093	3.018	SV-25090r1_rule	ECSC-1 PRNK-1	High

Description
This is a Category 1 finding because it allows anonymous logon users (null session connections) to list all account names and enumerate all shared resources, thus, providing a map of potential points to attack the system. By default, Windows allows anonymous users to list account names and enumerate share names.

STIG	Date
Win7 Audit	2013-06-10

Details

Check Text ( None )
None

Fix Text (F-29449r1_fix)
Configure the policy values for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “Network access: Do not allow anonymous enumeration of SAM accounts and shares” to “Enabled".