18.9.81.2.1 Ensure 'Configure Default consent' is set to 'Enabled: Always ask before sending data'

Information

This setting allows you to set the default consent handling for error reports.

The recommended state for this setting is: 'Enabled: Always ask before sending data'

Rationale:
Error reports may contain sensitive information and should not be sent to anyone automatically.

Solution

To establish the recommended configuration via GP, set the following UI path to 'Enabled: Always ask before sending data:'


Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Error Reporting\Consent\Configure Default consent


Note: This Group Policy path is provided by the Group Policy template 'ErrorReporting.admx/adml' that is included with all versions of the Microsoft Windows Administrative Templates.

Impact:
None - this is the default behavior.

See Also

https://workbench.cisecurity.org/files/1949

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-9(2), CCE|CCE-37112-0, CSCv6|13

Plugin: Windows

Control ID: 960fdd383800528483c6b14d7b2ef4e102c0998dca1f077314ae66203c8476cd