SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CCE

CCE-44126-1

Platform: cpe:/o:microsoft:windows_10

Disable: 'Do not enumerate connected users on domain-joined computers' This policy setting prevents connected users from being enumerated on domain-joined computers. If you enable this policy setting, the Logon UI will not enumerate any connected users on domain-joined computers. If you disable or do not configure this policy setting, connected users will be enumerated on domain-joined computers. Counter Measure: Enable this policy setting. Potential Impact: If you enable this policy setting, the Logon UI will not enumerate any connected users on domain-joined computers. If you disable or do not configure this policy setting, connected users will be enumerated on domain-joined computers."

Parameter:

[enable/disable]

Technical Mechanism:

(1) GPO: Computer ConfigurationAdministrative TemplatesSystemLogonDo not enumerate connected users on domain-joined computers (2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsSystemDontEnumerateConnectedUsers

CCSS Severity:		CCSS Metrics:
CCSS Score : 5.3		Attack Vector: NETWORK
Exploit Score: 3.9		Attack Complexity: LOW
Impact Score: 1.4		Privileges Required: NONE
Severity: MEDIUM		User Interaction: NONE
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N		Scope: UNCHANGED
		Confidentiality: LOW
		Integrity: NONE
		Availability: NONE

References:

Resource Id	Reference
SCAP Repo OVAL Definition	oval:org.secpod.oval:def:35390


30479



423868



248149



909



194803



282