Detections
Analytics

5.36 Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'

Information

Provides the ability to share a cellular data connection with another device.

The recommended state for this setting is: Disabled.

The capability to run a mobile hotspot from a domain-connected computer could easily expose the internal network to wardrivers or other hackers.

Solution

To establish the recommended configuration via GP, set the following UI path to: Disabled.

Computer Configuration\Policies\Windows Settings\Security Settings\System Services\Windows Mobile Hotspot Service

Impact:

The Windows Mobile Hotspot feature will not be available.

See Also

https://workbench.cisecurity.org/benchmarks/27452

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 58dc8b8d7e605273828d920ae54d52bd0674c376fdeff07bf11a21399f64b445