Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
HTTP authenticated access must be set to Integrated Windows Authentication only.
Description
Discussion Text
This feature controls the authentication method used to connect to the OWA virtual directories.
Ensure this is set to Integrated Windows Authentication only.
Anonymous access provides for no access control. Basic Authentication transmits the password in the clear and risks exposure, and the other methods are not recommended by Microsoft for this control.
Failure to configure this as per the recommendation may result in unrestricted access to OWA virtual directory, passwords being sent in the clear, and/or the inability to correctly authenticate, depending on which change is made.
Ensure this is set to Integrated Windows Authentication only.
Anonymous access provides for no access control. Basic Authentication transmits the password in the clear and risks exposure, and the other methods are not recommended by Microsoft for this control.
Failure to configure this as per the recommendation may result in unrestricted access to OWA virtual directory, passwords being sent in the clear, and/or the inability to correctly authenticate, depending on which change is made.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.