Detections
Analytics

18.10.37.1 (L2) Ensure 'Turn off location' is set to 'Enabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting turns off the location feature for the computer.

The recommended state for this setting is: Enabled.

This setting affects the location feature (e.g. GPS or other location tracking). From a security perspective, it's not a good idea to reveal your location to software in most cases, but there are legitimate uses, such as mapping software. However, they should not be used in high security environments.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled :

Computer Configuration\Policies\Administrative Templates\Windows Components\Location and Sensors\Turn off location

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template Sensors.admx/adml that is included with the Microsoft Windows 7 & Server 2008 R2 Administrative Templates (or newer).

Impact:

The location feature is turned off, and all programs on the computer are prevented from using location information from the location feature.

See Also

https://workbench.cisecurity.org/benchmarks/22944

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: cc7cf5107d2fb97df7babbef3939d2deb66140a3cc581841e8431d34a05ffc3d