Anonymous access to the registry must be restricted.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1152	WN12-RG-000004	SV-52864r2_rule		High

Description
The registry is integral to the function, security, and stability of the Windows system. Some processes may require anonymous access to the registry. This must be limited to properly protect the system.

STIG	Date
Windows Server 2012 / 2012 R2 Domain Controller Security Technical Implementation Guide	2016-12-19

Details

Check Text ( C-66339r1_chk )
Run "Regedit". Navigate to the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\ If the key does not exist, this is a finding. Review the permissions. If the default permissions listed below have been changed, this is a finding. Administrators - Full Control Backup Operators - Read (This key only) LOCAL SERVICE - Read

Fix Text (F-71725r1_fix)
Maintain the default permissions of the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\ Administrators - Full Control Backup Operators - Read (This key only) LOCAL SERVICE - Read