Wrong check for the control 18.8.28.4

ansible-lockdown / Windows-2019-CIS

CIS Baseline Ansible Role for Windows 2019

MIT License

130 stars 72 forks source link

Wrong check for the control 18.8.28.4 #20

Closed Julieeeen closed 3 years ago

Julieeeen commented 3 years ago

name: "SCORED | 18.8.28.4 | PATCH | L1 Ensure Enumerate local users on domain-joined computers is set to Disabled MS only" win_regedit: path: HKLM:\Software\Policies\Microsoft\Windows\System name: EnumerateLocalUsers data: 0 type: String when:
- rule_18_8_28_4 tags:
- level1-memberserver
- rule_18.8.28.4
- patch

georgenalen commented 3 years ago

Hey, Looking at this one I'm not sure it should be a string. Like with other I could be wrong but based on the two below links I think it should be dword still. Let me know if I'm wrong on this one.

https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsLogon::EnumerateLocalUsers

I know this is STIG, but it's the same control https://www.stigviewer.com/stig/windows_10/2015-11-30/finding/V-63633

George

Julieeeen commented 3 years ago

Hi,

Sorry my bad? it's correct. maybe a wrong copy/paste error from my side.

Sorry

We can close this issue.