Network access: Allow anonymous SID/Name translation

Information

Network access: Allow anonymous SID/name translation

This security setting determines if an anonymous user can request security identifier (SID) attributes for another user.

If this policy is enabled, a user with knowledge of an administrator's SID could contact a computer that has this policy enabled and use the SID to get the administrator's name.

Default on workstations and member servers: Disabled.
Default on domain controllers: Enabled.

Solution

Policy Path: Security Options
Policy Setting Name: Network access: Allow anonymous SID/Name translation

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-windows-10-and-windows-server-version/ba-p/1543631

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3

Plugin: Windows

Control ID: 389c3b12394ebb70af4c44ae0e917b8f936a3333bbb75abd60e59b5a59691e55