disbale Network session enumeration by gpo

Question

Hi;

Kindly i need the assistance

By default, Windows computers allow any authenticated user to enumerate network sessions to it. Disabling Net Session Enumeration removes the capability for any user to enumerate net session info.

regards

Yazan MAhsal

Answer 1

@Yazan M. Mashal check this GPO settings and test in a Dev/Test Environment before you implement on the prod env - https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-shares

Also there will be implications on the Domain Trusts so test accordingly.

Hope this helps.

JS

==

Please accept as answer and do a Thumbs-up to upvote this response if you are satisfied with the community help. Your upvote will be beneficial for the community users facing similar issues.

Answer 2

hi

thank you, i found this article is it correct or i need to use your solution.

https://answers.microsoft.com/en-us/windows/forum/all/network-session-enumeration/ecc80fd3-4584-4f6d-b20b-93cc82cdee28

thnaks