Back

Configure the "Logon options" to organizational standards.


CONTROL ID
07917
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Configure Key, Certificate, Password, Authentication and Identity Management settings in accordance with organizational standards., CC ID: 07621

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • Disallow anonymous or guest logins. (Annex A2: Security of Personal Computers & Other Computing Devices 14, Singapore(PDPC) Guide to Securing Personal Data in Electronic Medium, Revised 20 January 2017)
  • Configure the "Logon options" setting to "Enabled". (F92340DC-D006-48F8-A5E1-A60514A5E8F6, IE10 Computer Security Compliance, 1.0)
  • Configure the "Logon options" setting to "Enabled". (89A1AAAF-2ACB-4EFA-9992-96943CAE283A, IE10 Computer Security Compliance, 1.0)
  • Configure the "Logon options" setting to "Enabled". (B00D1A42-18ED-45D6-858A-5E41B637A593, IE10 Computer Security Compliance, 1.0)
  • Configure the "Logon options" setting to "Enabled". (D0B3324F-513D-4906-94FC-551E8985377F, IE10 Computer Security Compliance, 1.0)
  • Configure the "Logon options" setting to "Enabled". (5F78CA6A-4038-4506-9CC5-16855509BA1C, IE8 Computer Security Compliance, 1.0)
  • Configure the "Logon options" setting to "Enabled". (A63AFA02-791F-47F4-ABA1-07B652FE151E, IE8 Computer Security Compliance, 1.0)
  • Configure the "Logon options" setting to "Enabled". (173309EB-E833-44EB-8603-DF51684D91CC, IE8 Computer Security Compliance, 1.0)
  • Configure the "Logon options" setting to "Enabled". (5C6B6071-003A-4F9F-9C17-1AB6DF517252, IE8 Computer Security Compliance, 1.0)
  • Configure the "Logon options" setting to "Enabled". (5EDDA884-8FB0-4CA2-B837-07E6AE1A649A, IE9 Computer Security Compliance, 1.0)
  • Configure the "Logon options" setting to "Enabled". (F2ED5ACE-6EAA-457D-B7F7-C938B1AD9E79, IE9 Computer Security Compliance, 1.0)
  • Configure the "Logon options" setting to "Enabled". (6FE5D963-C3D0-41D4-9722-9C6135D2D279, IE9 Computer Security Compliance, 1.0)
  • Configure the "Logon options" setting to "Enabled". (643E0DF0-33B7-4775-9EA1-48B1549849E4, IE9 Computer Security Compliance, 1.0)
  • Title: Set 'Logon options' to 'Enabled:Prompt for user name and password' Description: This policy setting allows you to manage settings for logon options. If you enable this policy setting, you can choose from the following logon options: Anonymous logon disables HTTP authentication and uses th… (Rule:xccdf_org.cisecurity.benchmarks_rule_8.1.21_Set_Logon_options_to_EnabledPrompt_for_user_name_and_password Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_8.1.21.1_, The Center for Internet Security Microsoft Internet Explorer 10 Level 1 Benchmark, 1.0.0)
  • Title: Set 'Logon options' to 'Enabled:Anonymous logon' Description: This policy setting allows you to manage settings for logon options. If you enable this policy setting, you can choose from the following logon options: Anonymous logon disables HTTP authentication and uses the guest account on… (Rule:xccdf_org.cisecurity.benchmarks_rule_8.3.28_Set_Logon_options_to_EnabledAnonymous_logon Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_8.3.28.2_, The Center for Internet Security Microsoft Internet Explorer 10 Level 1 Benchmark, 1.0.0)
  • Title: Set 'Logon options' to 'Enabled:Anonymous logon' Description: This policy setting allows you to manage settings for logon options. If you enable this policy setting, you can choose from the following logon options: Anonymous logon disables HTTP authentication and uses the guest account on… (Rule:xccdf_org.cisecurity.benchmarks_rule_8.3.28_Set_Logon_options_to_EnabledAnonymous_logon Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_8.3.28.1_, The Center for Internet Security Microsoft Internet Explorer 10 Level 1 Benchmark, 1.0.0)
  • Title: Set 'Logon options' to 'Enabled:Prompt for user name and password' Description: This policy setting allows you to manage settings for logon options. If you enable this policy setting, you can choose from the following logon options: Anonymous logon disables HTTP authentication and uses th… (Rule:xccdf_org.cisecurity.benchmarks_rule_8.1.21_Set_Logon_options_to_EnabledPrompt_for_user_name_and_password Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_8.1.21.2_, The Center for Internet Security Microsoft Internet Explorer 10 Level 1 Benchmark, 1.0.0)
  • The "Logon options" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone\Logon options HK… (CCE-16809-6, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" current user setting should be configured correctly for the Locked-Down Internet Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone\Logon options HKEY_CURRENT… (CCE-16117-4, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" current user setting should be configured correctly for the Locked-Down Intranet Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone\Logon options HKEY_CURRENT… (CCE-15601-8, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone\Logon opti… (CCE-15463-3, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" current user setting should be configured correctly for the Locked-Down Local Machine Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone\Logon options HK… (CCE-15646-3, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" current user setting should be configured correctly for the Local Machine Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone\Logon options HKEY_CURRENT_USER\Software… (CCE-16031-7, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" machine setting should be configured correctly for the Locked-Down Internet Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone\Logon options HKEY_LOCAL_MA… (CCE-16807-0, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" machine setting should be configured correctly for the Locked-Down Local Machine Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone\Logon options HKE… (CCE-14981-5, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" machine setting should be configured correctly for the Locked-Down Intranet Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone\Logon options HKEY_LOCAL_MA… (CCE-16954-0, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone\Logon optio… (CCE-16092-9, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone\Logon options HKE… (CCE-16622-3, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" machine setting should be configured correctly for the Local Machine Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone\Logon options HKEY_LOCAL_MACHINE\Software… (CCE-16266-9, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" machine setting should be configured correctly for the Trusted Sites Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone\Logon options HKEY_LOCAL_MACHINE\Software… (CCE-15628-1, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Logon options" current user setting should be configured correctly for the Trusted Sites Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone\Logon options HKEY_CURRENT_USER\Software… (CCE-16815-3, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)