Network access: Do not allow anonymous enumeration of SAM accounts
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
Network access: Do not allow anonymous enumeration of SAM accounts
Description
This security setting determines what additional permissions will be granted for anonymous connections to the computer.
Windows allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares. This is convenient, for example, when an administrator wants to grant access to users in a trusted domain that does not maintain a reciprocal trust.
This security option allows additional restrictions to be placed on anonymous connections as follows:
None. Rely on default permissions.
Do not allow enumeration of SAM accounts. This option replaces Everyone with Authenticated Users in the security permissions for resources.
Default:
Enabled on workstation.
Disabled on server.
Configuring this security setting
You can configure this security setting by opening the appropriate policy and expanding the console tree as such: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\
For specific instructions about how to configure security policy settings, see Edit security settings on a Group Policy object.
Important
- This policy has no impact on domain controllers.
For more information, see: