Enumerate local users on domain-joined computers

Information

This policy setting allows local users to be enumerated on domain-joined computers.
If you enable this policy setting, Logon UI will enumerate all local users on domain-joined computers.
If you disable or do not configure this policy setting, the Logon UI will not enumerate local users on domain-joined computers.

Solution

Policy Path: System\Logon
Policy Setting Name: Enumerate local users on domain-joined computers

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-for-windows-10-v1909-and-windows-server/ba-p/1023093

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CSCv6|16.9

Plugin: Windows

Control ID: 6d4efe6eb70306d548562c608ee97cca42bc559f7049509cb793bab92cc338ef