WN12-CC-000126 - The Windows Remote Management (WinRM) service must not use Basic authentication.

Information

Basic authentication uses plain text passwords that could be used to compromise a system.

Solution

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Remote Management (WinRM) -> WinRM Service -> 'Allow Basic authentication' to 'Disabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_2012_and_2012_R2_MS_V3R7_STIG.zip

Item Details

Category: MAINTENANCE

References: 800-53|MA-4c., CAT|I, CCI|CCI-000877, Rule-ID|SV-225399r877395_rule, STIG-ID|WN12-CC-000126, STIG-Legacy|SV-51755, STIG-Legacy|V-36718, Vuln-ID|V-225399

Plugin: Windows

Control ID: b32976ad7584b842f7a10f1c6aa89b0136d9d8c70c47327f8685bdde4e36d669