Detections
Analytics

4.6.9.2 (L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Although this 'legacy' setting traditionally applied to the use of Internet Connection Sharing (ICS) in Windows 2000, Windows XP & Server 2003, this setting now freshly applies to the Mobile Hotspot feature in Windows 10 & Server 2016.

The recommended state for this setting is: Enabled

Warning: In order for Application Guard to function correctly, ICS must be enabled. If Application Guard is used in the environment, then an exception to this recommendation might be needed. To learn more on how to disable portions of ICS without breaking Application Guard, please visit:

FAQ - Microsoft Defender Application Guard | Microsoft Learn

.

Non-administrators should not be able to turn on the Mobile Hotspot feature and open their Internet connectivity up to nearby mobile devices.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled

Administrative Templates\Network\Network Connections\Prohibit use of Internet Connection Sharing on your DNS domain network

Impact:

Mobile Hotspot cannot be enabled or configured by Administrators and non-Administrators alike.

See Also

https://workbench.cisecurity.org/benchmarks/21767

Item Details

References: CSCv7|9.2

Plugin: Windows

Control ID: 08fa55f36b4bc5fcc5fbb754bce3f33b29a79ffd77e7ac7bbbb56d84c6b8433f