Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Anonymous access to the registry must be restricted.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1152 | WN12-RG-000004 | SV-52864r1_rule | ECCD-1 ECCD-2 | High |
| Description |
|---|
| The registry is integral to the function, security, and stability of the Windows system. Some processes may require anonymous access to the registry. This must be limited to properly protect the system. |
| STIG | Date |
|---|---|
| Windows Server 2012 / 2012 R2 Domain Controller Security Technical Implementation Guide | 2015-09-02 |
Details
| Check Text ( C-47181r2_chk ) |
|---|
| Using the Registry Editor, navigate to the following key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\ If the key does not exist, this is a finding. If the permissions are not at least as restrictive as the defaults listed below, this is a finding. Administrators - Full Backup Operators - Read(QENR) Local Service - Read |
| Fix Text (F-45790r2_fix) |
|---|
| Ensure the system is configured to prevent anonymous users from gaining access to the registry. Maintain the default permissions of the following registry key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\ Administrators - Full Backup Operators - Read(QENR) Local Service - Read |