Enumerate local users on domain-joined computers

Information

This policy setting allows local users to be enumerated on domain-joined computers.
If you enable this policy setting, Logon UI will enumerate all local users on domain-joined computers.
If you disable or do not configure this policy setting, the Logon UI will not enumerate local users on domain-joined computers.

Solution

Policy Path: System\Logon
Policy Setting Name: Enumerate local users on domain-joined computers

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-sept2019update-for-windows-10-v1903-and/ba-p/890940

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CSCv6|16.9

Plugin: Windows

Control ID: 0e7b391f6dc88be173322345c21be52d0a4808b7ab69ba11f1da06fd754fea03