UCF STIG Viewer Logo

The system is configured to give anonymous users Everyone rights.


Overview

Finding ID Version Rule ID IA Controls Severity
V-3377 3.071 SV-29262r1_rule ECCD-2 ECCD-1 ECSC-1 ECLP-1 Medium
Description
This setting helps define the permissions that anonymous users have. If this setting is enabled then anonymous users have the same rights and permissions as the built-in Everyone group. Anonymous users should not have these permissions or rights.
STIG Date
Windows 2003 Member Server Security Technical Implementation Guide 2015-06-24

Details

Check Text ( None )
None
Fix Text (F-133r1_fix)
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “Network access: Let everyone permissions apply to anonymous users” to “Disabled”.