TMA-SHAREPOINT-4.4
Ensure Anonymous authentication is denied
Descripción
SharePoint web applications should be configured to disallow anonymous authentication, which would allow users to authenticate and use the applications without confirming their identity. Manual review.
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
Central Administration > Manage web applications > select each web application > Authentication Providers > each zone. Verify 'Enable anonymous access' is not selected. PowerShell aid: Get-SPWebApplication | % { $_.IisSettings.Values } | ? AllowAnonymous.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Authentication Providers > each zone: clear 'Enable anonymous access' and save. Repeat for each web application.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- sharepointauthentication
- Referencia
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 4.4 Ensure Anonymous authentication is denied