5.15 Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'

Information

Enables multi-party communication using Peer-to-Peer Grouping.

The recommended state for this setting is: Disabled.

Peer Name Resolution Protocol is a distributed and (mostly) serverless way to handle name resolution of clients with each other. In a high security environment, it is more secure to rely on centralized name resolution methods maintained by authorized staff.

Solution

To establish the recommended configuration, run the following PowerShell command:

Set-Service -Name p2psvc -StartupType Disabled

Impact:

Some applications, such as HomeGroup, may not function.

See Also

https://workbench.cisecurity.org/benchmarks/28052

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 86178e8d73dab2caeaad89631b04d640cbc6a0a35080175c8d082facd9cfb0e7