Detections
Analytics

18.8.44.11.1 Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting specifies whether to enable or disable tracking of responsiveness events.

The recommended state for this setting is: 'Disabled'.

Rationale:
When enabled the aggregated data of a given event will be transmitted to Microsoft.

The option exists to restrict this feature for a specific user, set the consent level, and designate specific programs for which error reports could be sent.

However, centrally restricting the ability to execute PerfTrack to limit the potential for unauthorized or undesired usage, data leakage, or unintentional communications is highly recommended.

Solution

To establish the recommended configuration via GP, set the following UI path to 'Disabled:'


Computer Configuration\Policies\Administrative Templates\System\Troubleshooting and Diagnostics\Windows Performance PerfTrack\Enable/Disable PerfTrack


Note: This Group Policy path may not exist by default.

It is provided by the Group Policy template 'PerformancePerftrack.admx/adml' that is included with the Microsoft Windows 7 & Server 2008 R2 Administrative Templates (or newer).

Impact:
Responsiveness events are not processed.

See Also

https://workbench.cisecurity.org/files/1937

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CSCv6|13

Plugin: Windows

Control ID: ffba3e9306b4fc6ea3114957bb9b3d1a06068a7169c461909014cfd759f1dffa