UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Anonymous access to the registry must be restricted.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1152 3.030 SV-25137r2_rule ECCD-1 ECCD-2 High
Description
The registry is integral to the function, security, and stability of the Windows system. Some processes may require anonymous access to the registry. This must be limited to properly protect the system.
STIG Date
Windows 7 Security Technical Implementation Guide 2015-09-02

Details

Check Text ( C-60785r1_chk )
Using the Registry Editor, navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\

If the key does not exist, this is a finding.
If the permissions are not at least as restrictive as those below, this is a finding.

Administrators - Full
Backup Operators - Read(QENR)
Local Service - Read
Fix Text (F-65517r1_fix)
Ensure the system is configured to prevent anonymous users from gaining access to the registry. Maintain the default permissions of the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\

Administrators - Full
Backup Operators - Read(QENR)
Local Service - Read