Detections
Analytics

4.10.30.2 (L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting allows you to turn on or turn off Solicited (Ask for) Remote Assistance on this computer.

The recommended state for this setting is: Disabled

There is slight risk that a rogue administrator will gain access to another user's desktop session, however, they cannot connect to a user's computer unannounced or control it without permission from the user. When an expert tries to connect, the user can still choose to deny the connection or give the expert view-only privileges. The user must explicitly click the Yes button to allow the expert to remotely control the workstation.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Disabled

Administrative Templates\System\Remote Assistance\Configure Solicited Remote Assistance

Impact:

Users on this computer cannot use e-mail or file transfer to ask someone for help. Also, users cannot use instant messaging programs to allow connections to this computer.

See Also

https://workbench.cisecurity.org/benchmarks/21767

Item Details

References: CSCv7|9.2

Plugin: Windows

Control ID: 9608c6fa12b60be6111af2e6542519da4dae40c97f0f3257c833e4db05be6331