Detections
Analytics

2.11.4 (L1) Ensure 'Enable sharing user credentials with other users' is Disabled

Information

Google Chrome has a built-in feature to share passwords within a Google Family Group. Managed accounts cannot create or join a Google Family Group, so this policy needs to be disabled as a precaution.

This policy can be set to:

 - (1) Enabled
 - (0) Disabled

and must be set to (0) Disabled.

If this policy is unset, it is treated as Enabled but can be configured by individual users.

Managed accounts cannot create or join Google Family Groups, so they should not be configured to allow password sharing.

Solution

To establish the recommended configuration via Group Policy, configure the following setting to Disabled :

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Password manager\Enable sharing user credentials with other users

Impact:

Managed accounts cannot create or join a Google Family Group, so there should be no impact on the organization.

See Also

https://workbench.cisecurity.org/benchmarks/23110

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-8, CSCv7|4.8

Plugin: Windows

Control ID: bf52b4403db70cf2230740534ef36744751c92813ae9a1f03d7983e08edfea72