Disable Enumeration of SID’s
One way for an attacker to scope out a target system and, particularly, to identify the Administrator account so they can focus their efforts on the account with the most privileges is to list, or enumerate, the SID”s (serial identifiers) on a Windows machine.