Detections
Analytics

5.1 Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Service supporting the audio gateway role of the Bluetooth Handsfree Profile.

The recommended state for this setting is: Disabled.

Bluetooth technology has inherent security risks - especially prior to the v2.1 standard. Wireless Bluetooth traffic is not well encrypted (if at all), so in a high-security environment, it should not be permitted, in spite of the added inconvenience of not being able to use Bluetooth devices.

Solution

To establish the recommended configuration via GP, set the following UI path to: Disabled :

Computer Configuration\Policies\Windows Settings\Security Settings\System Services\Bluetooth Audio Gateway Service

Note: This service was first introduced in Windows 10 Release 1803. It appears to have replaced the older Bluetooth Handsfree Service (BthHFSrv), which was removed from Windows in that release (it is not simply a rename, but a different service).

Impact:

Bluetooth hands-free devices will not function properly with the computer.

See Also

https://workbench.cisecurity.org/benchmarks/26296

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 314e2ac0b42300426417842af8c04e1c09d57e8e05993e9447943d2f12568756