Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6825 | 5.107 | SV-29736r2_rule | Medium |
Description |
---|
The DCOM default authentication level has been detected to be below the required setting. If the authentication level is None, then any user can access any object on the system without authentication. |
STIG | Date |
---|---|
Windows Vista Security Technical Implementation Guide | 2016-06-03 |
Check Text ( C-40668r1_chk ) |
---|
Open a command prompt. Execute “Dcomcnfg.exe”. In the “Component Services” window, navigate to Component Services -> Computer -> My Computer Right-click “My Computer” and select “Properties”. Select the “Default Properties” tab. If the “Default Authentication Level” is set to “None” or “Call”, this is a finding. |
Fix Text (F-36078r1_fix) |
---|
Fortify DCOMs default permissions. This should be thoroughly tested to verify DCOM objects continue to function under tightened security. Open a command prompt. Execute “Dcomcnfg.exe”. In the “Component Services” window, navigate to Component Services -> Computer -> My Computer Right-click “My Computer” and select “Properties”. Select the “Default Properties” tab. Select a “Default Authentication Level” other than “None” or “Call”. For sensitive systems, an authentication level of “Packet Privacy” is recommended. Click OK. |