RestrictAnonymous

HKLM\SYSTEM\CurrentControlSet\Control\Lsa

Data type Range Default value
REG_DWORD 0 | 1 0

Description

Restricts anonymous users from displaying lists of users or viewing security permissions.

Value Meaning
0 Disabled. Anonymous users are not restricted.
1 Enabled. Users who logged on anonymously (also known as null session connections) cannot display lists of domain user names or share names. These users cannot use all of the features of Windows Explorer, Local Users and Groups, or other programs that enumerate users or shares or view Security permissions.

Note Image Note

Windows 2000 does not add this entry to the registry. You can add it by editing the registry or by using a program that edits the registry.

Tip Image Tip

For more information on RestrictAnonymous, see the Microsoft Knowledge Base link on the Web Resources page. Search the Knowledge Base for Article Q143474, or use the keywords restrict anonymous logon.