Detections
Analytics

18.8.22.1.8 Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting specifies whether the Windows Registration Wizard connects to Microsoft.com for online registration.

The recommended state for this setting is: 'Enabled'.

Rationale:
Users in an enterprise managed environment should not be registering their own copies of Windows, providing their own PII in the process.

Solution

To establish the recommended configuration via GP, set the following UI path to 'Enabled:'


Computer Configuration\Policies\Administrative Templates\System\Internet Communication Management\Internet Communication settings\Turn off Registration if URL connection is referring to Microsoft.com


Note: This Group Policy path is provided by the Group Policy template 'ICM.admx/adml' that is included with all versions of the Microsoft Windows Administrative Templates.

Impact:
Users are blocked from connecting to Microsoft.com for online registration and they cannot register their copy of Windows online.

See Also

https://workbench.cisecurity.org/files/1929

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10)

Plugin: Windows

Control ID: d1b42a7714ea903ab194ead3210835844143d1457d0e1595dbd6c399a344e0fe