5.1 (L2) Ensure 'Bluetooth Handsfree Service (BthHFSrv)' is set to 'Disabled'

Information

Enables wireless Bluetooth headsets to run on this computer.
The recommended state for this setting is: Disabled.

Rationale:
Bluetooth technology has inherent security risks - especially prior to the v2.1 standard. Wireless Bluetooth traffic is not well encrypted (if at all), so in a high-security environment, it should not be permitted, in spite of the added inconvenience of not being able to use Bluetooth devices.

Solution

To establish the recommended configuration via GP, set the following UI path to: Disabled.
Computer Configuration\Policies\Windows Settings\Security Settings\System Services\Bluetooth Handsfree Service

Impact:
Bluetooth headsets will not function properly with the computer.

Default Value:
Manual (Trigger Start)

See Also

https://workbench.cisecurity.org/files/2754

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4, CSCv6|9.1, CSCv7|9.2

Plugin: Windows

Control ID: 4a6545c53f8bcb11f85c6d1008316690592f0111000a0e6c3a6868860214fc4f