[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-47799-2

Platform: cpe:/o:microsoft:windows_server_2016Date: (C)2022-09-02   (M)2023-07-07



This policy setting specifies whether users can share files within their profile. By default users are allowed to share files within their profile to other users on their network after an administrator opts in the computer. An administrator can opt in the computer by using the sharing wizard to share a file within their profile. If you enable this policy setting, users cannot share files within their profile using the sharing wizard. Also, the sharing wizard cannot create a share at %root%users and can only be used to create SMB shares on folders. If you disable or don't configure this policy setting, users can share files out of their user profile after an administrator has opted in the computer. Fix: (1) GPO: User ConfigurationAdministrative TemplatesWindows ComponentsNetwork Sharing!Prevent users from sharing files within their profile. (2) REG: HKEY_USERSSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer!NoInplaceSharing


Parameter:

[enable/disable]


Technical Mechanism:

(1) GPO: User Configuration\Administrative Templates\Windows Components\Network Sharing!Prevent users from sharing files within their profile. (2) REG: HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInplaceSharing

CCSS Severity:CCSS Metrics:
CCSS Score : 6.6Attack Vector: LOCAL
Exploit Score: 1.8Attack Complexity: LOW
Impact Score: 4.7Privileges Required: LOW
Severity: MEDIUMUser Interaction: NONE
Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:LScope: UNCHANGED
 Confidentiality: HIGH
 Integrity: LOW
 Availability: LOW
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:83732


OVAL    1
oval:org.secpod.oval:def:83732
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_Server_2016

© SecPod Technologies