Detections
Analytics

18.8.44.5.1 Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting configures Microsoft Support Diagnostic Tool (MSDT) interactive communication with the support provider.

MSDT gathers diagnostic data for analysis by support professionals.

The recommended state for this setting is: 'Disabled'.

Rationale:
Due to privacy concerns, data should never be sent to any 3rd party since this data could contain sensitive information.

Solution

To establish the recommended configuration via GP, set the following UI path to 'Disabled':


Computer Configuration\Policies\Administrative Templates\System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool\Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider


Note: This Group Policy path may not exist by default.

It is provided by the Group Policy template 'MSDT.admx/adml' that is included with the Microsoft Windows 8.0 & Server 2012 (non-R2) Administrative Templates (or newer).

Impact:
MSDT cannot run in support mode, and no data can be collected or sent to the support provider.

See Also

https://workbench.cisecurity.org/files/1937

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-11, CSCv6|13

Plugin: Windows

Control ID: d212fc109b29bf46233903f12a1809a848f999e4a3de331a892bfc75d2d3aebe