Detections
Analytics

WN11-CC-000305 - Indexing of encrypted files must be turned off.

Information

Indexing of encrypted files may expose sensitive data. This setting prevents encrypted files from being indexed.

Note: A different registry location is needed when systems are managed by Intune versus GPO.

Solution

For GPO-managed systems:

Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Search >> 'Allow indexing of encrypted files' to 'Disabled'.

For Intune-managed systems:

Revise the Intune policy to disable indexing of encrypted files.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R9_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-253409r1210297_rule, STIG-ID|WN11-CC-000305, Vuln-ID|V-253409

Plugin: Windows

Control ID: fe94df81ecf5405d278f81992ccaab85aa281a03de4be4909f88547e254f458c