Detections
Analytics

5.37 Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'

Information

Provides the ability to share a cellular data connection with another device.

The recommended state for this setting is: Disabled.

The capability to run a mobile hotspot from a domain-connected computer could easily expose the internal network to wardrivers or other hackers.

Solution

To establish the recommended configuration via GP, set the following UI path to: Disabled.

Computer Configuration\Policies\Windows Settings\Security Settings\System Services\Windows Mobile Hotspot Service

Impact:

The Windows Mobile Hotspot feature will not be available.

See Also

https://workbench.cisecurity.org/benchmarks/27832

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 8de08d66b641b9a8aa89896830c376451735660b1f943afabbbf60701545dbff