Configuring this setting prevents autorun commands from executing. The default autorun behavior must be configured to prevent autorun commands.Īllowing autorun commands to execute may introduce malicious code to a system. This setting restricts access to those defined in 'Network access: Named Pipes that can.Īnonymous enumeration of shares must be restricted.Īllowing anonymous logon users (null session connections) to list all account names and enumerate all shared resources can provide a map of potential points to attack the system.Īutoplay must be disabled for all drives.

As a result, the setup file of programs or.Īnonymous access to Named Pipes and Shares must be restricted.Īllowing anonymous access to named pipes or shares provides the potential for unauthorized system access.

Autoplay begins reading from a drive as soon as you insert media in the drive. To support this, volumes must be formatted using the NTFS file system.Īutoplay must be turned off for non-volume devices.Īllowing autoplay to execute may introduce malicious code to a system. The ability to set access permissions and auditing is critical to maintaining the security and proper access controls of a system. Local volumes must be formatted using NTFS. Enabling Windows Installer to elevate privileges when installing applications can allow malicious persons and applications to gain. Standard user accounts must not be granted elevated privileges. The Windows Installer Always install with elevated privileges must be disabled. Inappropriate granting of user rights can provide system, administrative, and other high level capabilities.Īccounts with the 'Debug Programs' user right can attach a debugger to any process or. The Debug programs user right must only be assigned to the Administrators group. Solicited assistance is help that is specifically requested by the local user. Remote assistance allows another user to view or take control of the local session of a user. Solicited Remote Assistance must not be allowed. This setting controls whether or not a LAN Manager. The LAN Manager hash uses a weak encryption algorithm and there are several tools available that use this hash to retrieve account passwords. The system must be configured to prevent the storage of the LAN Manager hash of passwords. Findings (MAC I - Mission Critical Classified) Finding ID

Stig viewer mac