[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Ensure insecure guest logons is set to disable

ID: oval:org.secpod.oval:def:40193Date: (C)2017-04-25   (M)2023-12-12
Class: COMPLIANCEFamily: windows




This policy setting determines if the SMB client will allow insecure guest logons to an SMB server.If you enable this policy setting or if you do not configure this policy setting, the SMB client will allow insecure guest logons.If you disable this policy setting, the SMB client will reject insecure guest logons.Insecure guest logons are used by file servers to allow unauthenticated access to shared folders. While uncommon in an enterprise environment, insecure guest logons are frequently used by consumer Network Attached Storage (NAS) appliances acting as file servers. Windows file servers require authentication and do not use insecure guest logons by default. Since insecure guest logons are unauthenticated, important security features such as SMB Signing and SMB Encryption are disabled. As a result, clients that allow insecure guest logons are vulnerable to a variety of man-in-the-middle attacks that can result in data loss, data corruption, and exposure to malware. Additionally, any data written to a file server using an insecure guest logon is potentially accessible to anyone on the network. Microsoft recommends disabling insecure guest logons and configuring file servers to require authenticated access. Vulnerability: Unauthenticated access to shared folders allows a variety of man-in-the-middle attacks that can result in data loss, data corruption, and exposure to malware. Additionally, any data written to a file server using an insecure guest logon is potentially accessible to anyone on the network.Counter Measure: Enable this setting.Potential Impact: Unauthenticated users or software will be unable to access the shared folders.Fix:(1) GPO: Computer Configuration\Administrative Templates\Network\Lanman Workstation\Enable insecure guest logons(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LanmanWorkstation!AllowInsecureGuestAuth

Platform:
Microsoft Windows Server 2016
Reference:
CCE-45201-1
CPE    1
cpe:/o:microsoft:windows_server_2016:::x64
CCE    1
CCE-45201-1
XCCDF    2
xccdf_org.secpod_benchmark_general_Windows_Server_2016
xccdf_org.secpod_benchmark_NIST_800_171_R1_Windows_Server_2016

© SecPod Technologies