UNC Hardening

Question

Hi,

I have gone through the community Q&A and also many other sites but could not make myself understand use of UNC Hardening. Based on some sites I tried to configure UNC Hardening, say for e.g. if I access NETLOGON & SYSLOG by using IP of server it cannot be accessed and like wise

But what I see is that I am able to access NETLOGON & SYSLOG with help of IP and also without configuring UNC Hardening.
Can anyone help me with exact use of UNC Hardening with practical example if any.

Thanks

Manish

Answer 1

Hi,

UNC Hardening aim is to tackle man-in-the-middle attack related to share folders access. It will help you for example prevent a user executing an illegitimate script located on a rogue file server via name spoofing.
Normally if you have configured it like explained in this article it should work
https://support.microsoft.com/en-us/topic/ms15-011-vulnerability-in-group-policy-could-allow-remote-code-execution-february-10-2015-91b4bda2-945d-455b-ebbb-01d1ec191328
https://msrc-blog.microsoft.com/2015/02/10/ms15-011-ms15-014-hardening-group-policy/

Regards,