Detections
Analytics

2.14.7 (L1) Ensure 'Enable curtaining of remote access hosts' is set to 'Disabled'

Information

This setting allows someone physically present at the host machine to see what a user is doing while a remote connection is in progress.

If this setting is disabled, a host's physical input and output devices are enabled while a remote connection is in progress.

The recommended state for this setting is: Disabled (0)

If a remote session is in progress, the user physically present at the host machine shall be able to see what a remote user is doing.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Remote access\Enable curtaining of remote access hosts

Impact:

None - This is the default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/23110

Item Details

Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|AC-17, 800-53|AC-17(1), 800-53|SC-7, 800-53|SI-4, CSCv7|12.12

Plugin: Windows

Control ID: 25e4dd58dec5f80e43609345fd38b0e8b8ce44c46d06b5fb0ff884978e3d8093