Null Session Group Policy Not Working

Hi All,

I've applied the following group policies

Disabled: 

Network access: Allow anonymous SID/Name translation
Network access: Let Everyone permissions apply to anonymous users 

Enabled:

Network access: Do not allow anonymous enumeration of SAM accounts
Network access: Do not allow anonymous enumeration of SAM accounts and shares 

Leave Empty:

Network access: Named Pipes that can be accessed anonymously
Network access: Shares that can be accessed anonymously 

I've tested RSOP and I do see these policies being applied (Grayed out with the options set) but when I do a 

net use \\host_name_or_IP_address\ipc$ "" "/user:"

I still get a "The command completed successfully."

I am tearing my head out trying to figure out why this isn't working. Should I look at any other policies that might be turned on to see if it is interfering with these policies? 

I tried to unjoin the server from the domain, clear out security policies, and apply local policies, but it is still not working. 

Any ideas?

June 22nd, 2015 1:39pm

Also,

For the following 

Leave Empty:

Network access: Named Pipes that can be accessed anonymously
Network access: Shares that can be accessed anonymously 

I've gone in and left it empty, which sets it at "not defined" and i've also gone in, checked the box "define this policy setting in the template", cleared out everything and put "Null" inside.

Still doesn't work.


Free Windows Admin Tool Kit Click here and download it now
June 22nd, 2015 1:44pm

Hi Armourd,

Would you please check the registry if the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\RestrictAnonymous exist and the Dword value set as 2?

You can check the below link for more reference:

https://support.microsoft.com/en-us/kb/246261

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may  require you to reinstall your operating system. Microsoft cannot guarantee that you can solve  problems that result from using Registry Editor incorrectly. Use Registry Editor at your own  risk.

Best Regards,

Elaine

June 28th, 2015 10:06pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics