Restrict Anonymous Users

Check Description

This check determines whether the RestrictAnonymous registry key is used to restrict anonymous connections on the scanned computer.

Anonymous users can list certain types of system information, including user names and details, account policies, and share names. Users who want enhanced security can restrict this function so that anonymous users cannot access information.

Additional Information

The RestrictAnonymous registry key controls the level of enumeration that is granted to an anonymous user. You can set this key to any of the following values:

0 - None. Rely on default permissions
1 - Do not allow enumeration of Security Accounts Manager (SAM) accounts and names
2 - No access without explicit anonymous permissions (not available on Windows NT 4.0)

Additional Resources

Restricting Information Available to Anonymous Logon Users (Q143474) (Windows NT 4.0)

How to Use the RestrictAnonymous Registry Value in Windows 2000 (Q246261)