[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Network access: Restrict anonymous access to Named Pipes and Shares

ID: oval:org.secpod.oval:def:8822Date: (C)2013-01-21   (M)2023-05-09
Class: COMPLIANCEFamily: windows




The Network access: Restrict anonymous access to Named Pipes and Shares setting should be configured correctly. When enabled, this policy setting restricts anonymous access to only those shares and pipes that are named in the Network access: Named pipes that can be accessed anonymously and Network access: Shares that can be accessed anonymously settings. This policy setting controls null session access to shares on your computers by adding RestrictNullSessAccess with the value 1 in the HKLM\\System \\CurrentControlSet\\Services\\LanManServer\\Parameters registry key. This registry value toggles null session shares on or off to control whether the server service restricts unauthenticated clients access to named resources. Null sessions are a weakness that can be exploited through shares (including the default shares) on computers in your environment. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Network access: Restrict anonymous access to Named Pipes and Shares (2) KEY: HKLM\System\CurrentControlSet\Services\LanManServer\Parameters\restrictnullsessaccess

Platform:
Microsoft Windows Server 2008 R2
Reference:
CCE-10940-5
CPE    1
cpe:/o:microsoft:windows_server_2008:r2
CCE    1
CCE-10940-5
XCCDF    5
xccdf_org.secpod_benchmark_HIPAA_45CFR_164_Windows_Server_2008_R2
xccdf_org.secpod_benchmark_SecPod_Windows_Server_2008_R2
xccdf_org.secpod_benchmark_general_Windows_Server_2008_R2
xccdf_org.secpod_benchmark_PCI_3_2_Windows_Server_2008_R2
...

© SecPod Technologies