Detections
Analytics

5.37 Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'

Information

Provides the ability to share a cellular data connection with another device.

The recommended state for this setting is: Disabled.

The capability to run a mobile hotspot from a domain-connected computer could easily expose the internal network to wardrivers or other hackers.

Solution

To establish the recommended configuration, run the following PowerShell command:

Set-Service -Name icssvc -StartupType Disabled

Impact:

The Windows Mobile Hotspot feature will not be available.

See Also

https://workbench.cisecurity.org/benchmarks/28052

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: b8e713083b205e3e1c6a790749f469b4c3e05caf6c0bd2b1bf7237c55664fce2