a115da09-58b1-40dd-85ca-6f6e4cac977d
The username is one part of logon credentials that could be used to gain access to a system. Preventing the enumeration of users limits this information to authorized personnel.
To fix this configure the policy value for
Computer Configuration
|_ Administrative Templates
|_ System
|_ Logon
|_ "Enumerate local users on domain-joined computers" to "Disabled".
STIG: Server:
2022: https://stigviewer.com/stigs/microsoft_windows_server_2022/2023-09-11/finding/V-254430
2019: https://stigviewer.com/stigs/microsoft_windows_server_2019/2023-09-11/finding/V-205696
Desktop:
W11: https://stigviewer.com/stigs/microsoft_windows_11/2023-09-29/finding/V-253379
W10: https://stigviewer.com/stigs/microsoft_windows_10/2023-09-29/finding/V-220820
Nist 800-53: AC-6(10)
Nist 800-171: 3.1.7
Manage your cookie preferences below:
To learn more about our use of cookies, please see our
Privacy Policy.