Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-1135 | 3.027 | SV-25007r1_rule | ECCD-1 | Low |
Description |
---|
Improperly configured share permissions on printers can permit the addition of unauthorized print devices on the network. Windows shares are a means by which files, folders, printers, and other resources can be published for network users to remotely access. Regular users cannot create shares on their local machines; only Administrators and Power Users have that ability. |
STIG | Date |
---|---|
Windows 7 Security Technical Implementation Guide | 2012-08-22 |
Check Text ( C-26690r1_chk ) |
---|
Open “Devices and Printers” in Control Panel If there are no locally attached printers, then mark this as “Not Applicable.” Perform this check for each locally attached printer: Right click on a locally-attached printer. Select “Printer Properties”. Select the “Sharing” tab. View whether “Share this printer” is checked. Perform this check on each printer that has the “Share this printer” selected: Select the Security tab. If any non-administrative user accounts or groups have greater than “Print”, then this is a finding. |
Fix Text (F-88r1_fix) |
---|
Configure the permissions on locally shared printers to meet the minimum requirements. |