Detections
Analytics

GOOG-17-007600 - Google Android 17 must be configured to disable multiuser modes.

Information

Multiuser mode allows multiple users to share a mobile device by providing a degree of separation between user data. To date, no mobile device with multiuser mode features meets DoW requirements for access control, data separation, and nonrepudiation for user accounts. In addition, the MDFPP does not include design requirements for multiuser account services. Disabling multiuser mode mitigates the risk of not meeting DoW multiuser account security policies.

SFR ID: FMT_SMF_EXT.1.1 #47

Solution

Configure the Google Android 17 device to disable multiuser modes.

On the EMM console:

COBO and COPE:

1. Open 'User restrictions'.
2. Open 'Set user restrictions'.
3. Toggle 'Disallow modify accounts' to 'ON'.

Configuration API: DISALLOW_MODIFY_ACCOUNTS

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_17_Y26M06_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-2a., CAT|II, CCI|CCI-002110, Rule-ID|SV-284714r1240590_rule, STIG-ID|GOOG-17-007600, Vuln-ID|V-284714

Plugin: MDM

Control ID: 80e123da95ebaa894c7b3c1905d91e5e509f0a859df2dd191bd305f7918f82b1