Microsoft SharePoint Server
TMA-SHAREPOINT-4.4
Ensure Anonymous authentication is denied
TinggiLevel 1Tinjauan manualsharepoint
Deskripsi
SharePoint web applications should be configured to disallow anonymous authentication, which would allow users to authenticate and use the applications without confirming their identity. Manual review.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Central Administration > Manage web applications > select each web application > Authentication Providers > each zone. Verify 'Enable anonymous access' is not selected. PowerShell aid: Get-SPWebApplication | % { $_.IisSettings.Values } | ? AllowAnonymous.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Authentication Providers > each zone: clear 'Enable anonymous access' and save. Repeat for each web application.
Properti
- Sistem operasi
- Apa saja
- Tag
- sharepointauthentication
- Referensi
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 4.4 Ensure Anonymous authentication is denied