VM : disable-unexposed-features-autologon

Information

Disable certain unexposed features.
Some VMX parameters don't apply on vSphere because VMware virtual machines work on both vSphere and hosted virtualization platforms such as Workstation and Fusion. Explicitly disabling these features reduces the potential for vulnerabilities because it reduces the number of ways in which a guest can affect the host.

http://pubs.vmware.com/vsphere-60/topic/com.vmware.vsphere.security.doc/GUID-60E83710-8295-41A2-9C9D-83DEBB6872C2.html

Solution

# Add the setting to all VMs -
Get-VM | New-AdvancedSetting -Name "isolation.tools.ghi.autologon.disable" -value $true

See Also

https://www.vmware.com/content/dam/digitalmarketing/vmware/en/files/xls/vSphere_6_0_Hardening_Guide_GA_15_Jun_2015.xls

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-14a.

Plugin: VMware

Control ID: 205f23f8b4ba83381465e619aa7305d6d5d5c19c2f51fdfd78412eef48f84c3c