Enumerate local users on domain-joined computers

Information

This policy setting allows local users to be enumerated on domain-joined computers. If you enable this policy setting Logon UI will enumerate all local users on domain-joined computers.

If you disable or do not configure this policy setting the Logon UI will not enumerate local users on domain-joined computers.

Solution

Policy Path: System\Logon
Policy Setting Name: Enumerate local users on domain-joined computers

See Also

https://blogs.technet.microsoft.com/secguide/2016/10/17/security-baseline-for-windows-10-v1607-anniversary-edition-and-windows-server-2016/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CSCv6|16.9

Plugin: Windows

Control ID: bafd0deee23bbd8fcb593e466687fae46ecc2354569cc22d0a34e3de5d8b66a3