Detections
Analytics

4.6.9.3 (L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting determines whether to require domain users to elevate when setting a network's location.

The recommended state for this setting is: Enabled

Allowing regular users to set a network location increases the risk and attack surface.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled

Administrative Templates\Network\Network Connections\Require domain users to elevate when setting a network's location

Impact:

Domain users must elevate when setting a network's location.

See Also

https://workbench.cisecurity.org/benchmarks/21719

Item Details

References: CSCv7|4.3

Plugin: Windows

Control ID: 1e914a532b38920681dd5470987a3fc2f902678ae3023e7dc33c7df56b3a0670