Anonymous shares are not restricted.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1093	3.018	SV-28983r1_rule	PRNK-1 ECSC-1	High

Description
This is a Category 1 finding because it allows anonymous logon users (null session connections) to list all account names and enumerate all shared resources, thus providing a map of potential points to attack the system.

STIG	Date
Windows 2008 Domain Controller Security Technical Implementation Guide	2014-04-07

Details

Check Text ( None )
None

Fix Text (F-28805r1_fix)
Configure the policy values for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “Network access: Do not allow anonymous enumeration of SAM accounts” and “Network access: Do not allow anonymous enumeration of SAM accounts and shares” to “Enabled".