Enumerate local users on domain-joined computers

Information

This policy setting allows local users to be enumerated on domain-joined computers. If you enable this policy setting, Logon UI will enumerate all local users on domain-joined computers.

If you disable or do not configure this policy setting, the Logon UI will not enumerate local users on domain-joined computers.

Solution

Policy Path: System\Logon
Policy Setting Name: Enumerate local users on domain-joined computers

See Also

https://blogs.technet.microsoft.com/secguide/2015/11/13/security-baseline-for-windows-10-build-10240-final/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CSCv6|16.9

Plugin: Windows

Control ID: ef35c5e89303ef257757ea2ed65edc913e4013e5fea4e86d761f158053b1ae09