Authentication is what controls who is allowed to have access to what.
The following list is a set of items that should be reviewed when creating an security audit of your authentication system.
- Is administrative access controlled by multi-factor authentication?
- LM and NTLM authentication is disabled?
- Allow anonymous SID/Name Translation is disabled?
- Let everyone permissions apply to anonymous users is disabled?
- Do not allow anonymous enumeration of SAM accounts is enabled?
- Do not allow anonymous enumeration of shares is enabled?
| 