Network Access: Must prevent NTLM from falling back to a Null session

793452ad-d37f-461b-a270-cc4e0ea1c2a5

NTLM sessions that are allowed to fall back to Null (unauthenticated) sessions may gain unauthorized access.

Remediation

To fix this configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> "Network security: Allow LocalSystem NULL session fallback" to "Disabled".

STIG: Server: https://www.stigviewer.com/stig/windows_server_2019/2020-06-15/finding/V-93297
Desktop: https://www.stigviewer.com/stig/windows_10/2021-08-18/finding/V-220934



stig-medium-server
compliance-server
security-server
nist800-171
cmmc-l2
stig-medium-desktop
compliance-desktop
security-desktop