Anonymous SID/Name translation is allowed.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-3337 | 3.062 | SV-25080r1_rule | ECSC-1 | High |
| Description |
|---|
| This is a Category 1 finding because this setting controls the ability of users or processes that have authenticated as anonymous users to perform SID/Name translation. This setting should be disabled, as only authorized users should be able to perform such translations. |
| STIG | Date |
|---|---|
| Windows 7 Security Technical Implementation Guide | 2014-04-02 |
Details
| Check Text ( C-26731r1_chk ) |
|---|
| Analyze the system using the Security Configuration and Analysis snap-in. Expand the Security Configuration and Analysis tree view. Navigate to Local Policies -> Security Options. If the value for “Network access: Allow anonymous SID/Name translation” is not set to “Disabled”, then this is a finding. |
| Fix Text (F-121r1_fix) |
|---|
| Configure the system to disable anonymous SID/Name translation. |