TMA-SHAREPOINT-4.4
Ensure Anonymous authentication is denied
Opis
SharePoint web applications should be configured to disallow anonymous authentication, which would allow users to authenticate and use the applications without confirming their identity. Manual review.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
Central Administration > Manage web applications > select each web application > Authentication Providers > each zone. Verify 'Enable anonymous access' is not selected. PowerShell aid: Get-SPWebApplication | % { $_.IisSettings.Values } | ? AllowAnonymous.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Authentication Providers > each zone: clear 'Enable anonymous access' and save. Repeat for each web application.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- sharepointauthentication
- Referenca
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 4.4 Ensure Anonymous authentication is denied