Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Shares other than the default administrative shares are enabled on a name server.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-3625 | DNS4580 | SV-3625r2_rule | ECAN-1 | Medium |
| Description |
|---|
| Non-administrative shares are unnecessary for name server operation and provide adversaries with an additional possible point of attack. |
| STIG | Date |
|---|---|
| Windows DNS | 2015-12-28 |
Details
| Check Text ( C-3452r2_chk ) |
|---|
| From a command prompt, type net share and press enter. If any shares appear other than default administrative shares (e.g., C$, NETLOGON$), then this is a finding |
| Fix Text (F-3556r1_fix) |
|---|
| The SA should disable all non-administrative shares. |