<div>
<blockquote>
Recommended to <b>do it anywhere</b>, but definitely recommended for domain controller shares as mentioned.
</blockquote>
I agree with this quote from the solution quoted in question and as per CIS benchmark
</div>


> Recommended to do it anywhere, but definitely recommended for domain controller shares as mentioned.

I agree with this quote from the solution quoted in question and as per CIS benchmark

<div>
I hope you understood that it only matters if you have shares on your machine. Clients normally don't host shares.
</div>


I hope you understood that it only matters if you have shares on your machine. Clients normally don't host shares.

<div>
&quot;The feature and the configuration settings live completely on the client-side&quot; - ha...truly forgot about that, although I have deployed the setting myself in our domain and of course to clients :-)
</div>


"The feature and the configuration settings live completely on the client-side" - ha...truly forgot about that, although I have deployed the setting myself in our domain and of course to clients :-)

<div>
<div class="content wysiwyg-content">
I had this question after viewing <a href="https://www.experts-exchange.com/questions/28962730/MS15-011-UNC-hardening-clarification.html" rel="ugc">MS15-011 - UNC hardening clarification?</a>.<br />
<br />
I was searching EE for an article on UNC hardening post MS15-011 patch install. &nbsp;I understand the reasoning for the post patch GPO, which leads me to believe this GPO needs to apply workstations <b>and</b> servers, and not just servers?
</div>
</div>


I had this question after viewing MS15-011 - UNC hardening clarification? (https://www.experts-exchange.com/questions/28962730/MS15-011-UNC-hardening-clarification.html).

I was searching EE for an article on UNC hardening post MS15-011 patch install.  I understand the reasoning for the post patch GPO, which leads me to believe this GPO needs to apply workstations and servers, and not just servers?

Does UNC hardening apply to both workstations and servers?

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.