TMA-CHROME-2.8.1
Ensure 'Allow remote access connections to this machine' is set to 'Disabled'
Description
This is a setting for Chrome Remote desktop. If this setting is Disabled, the remote access host service cannot be started or configured to accept incoming connections. - Disabled (0): Prevent remote access connections to this machine - Enabled (1): Allow remote access connections to this machine The recommended state for this setting is: Disabled (0) Rationale: Only approved remote access systems should be used. NOTE: If Chrome Remote Desktop is approved and required for use, then this setting can be ignored. The benchmark marks this recommendation Manual (organisation-specific value or not reliably checkable), so it is reported as SKIP with review steps.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Confirm via Group Policy (gpresult /h or the GPMC) that Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Remote Access\Allow remote access connections to this machine is configured as the title requires. This group policy setting is backed by the following registry location which should be set to 0: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome:RemoteAccessHostAllowRemoteAccessConnections
How it is fixed
Fix method: Guidance or infrastructure patch
Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Remote Access\Allow remote access connections to this machine = Disabled
Properties
- Operating systems
- Any
- Tags
- chromebrowsercis-l1manual
- Reference
- CIS Google Chrome Benchmark v3.0.0 - 2.8.1 Ensure 'Allow remote access connections to this machine' is set to 'Disabled'