Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The Anonymous Logon and Everyone groups must not be members of the Pre-Windows 2000 Compatible Access group.
Description
Discussion Text
The Pre-Windows 2000 Compatible Access group was created to allow Windows NT domains to interoperate with AD domains by allowing unauthenticated access to certain AD data. The default permissions on many AD objects are set to allow access to the Pre-Windows 2000 Compatible Access group.
When the Anonymous Logon or Everyone groups are members of the Pre-Windows 2000 Compatible Access group, anonymous access to many AD objects is enabled.
Anonymous access to AD data could provide valuable account or configuration information to an intruder trying to determine the most effective attack strategies.
When the Anonymous Logon or Everyone groups are members of the Pre-Windows 2000 Compatible Access group, anonymous access to many AD objects is enabled.
Anonymous access to AD data could provide valuable account or configuration information to an intruder trying to determine the most effective attack strategies.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.