Microsoft SharePoint Server
TMA-SHAREPOINT-4.4
Ensure Anonymous authentication is denied
HighLevel 1Manual reviewsharepoint
Description
SharePoint web applications should be configured to disallow anonymous authentication, which would allow users to authenticate and use the applications without confirming their identity. Manual review.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Central Administration > Manage web applications > select each web application > Authentication Providers > each zone. Verify 'Enable anonymous access' is not selected. PowerShell aid: Get-SPWebApplication | % { $_.IisSettings.Values } | ? AllowAnonymous.
How it is fixed
Fix method: Guidance or infrastructure patch
Authentication Providers > each zone: clear 'Enable anonymous access' and save. Repeat for each web application.
Properties
- Operating systems
- Any
- Tags
- sharepointauthentication
- Reference
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 4.4 Ensure Anonymous authentication is denied