Enumerate local users on domain-joined computers

Information

This policy setting allows local users to be enumerated on domain-joined computers.
If you enable this policy setting, Logon UI will enumerate all local users on domain-joined computers.
If you disable or do not configure this policy setting, the Logon UI will not enumerate local users on domain-joined computers.

Solution

Policy Path: System\Logon
Policy Setting Name: Enumerate local users on domain-joined computers

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-windows-10-and-windows-server-version/ba-p/1543631

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CSCv6|16.9

Plugin: Windows

Control ID: a321d5072f0024e34a9394311150f79ebfe099904669bf236413489099fc6dff