TMA-CHROME-2.8.1
Ensure 'Allow remote access connections to this machine' is set to 'Disabled'
Описание
This is a setting for Chrome Remote desktop. If this setting is Disabled, the remote access host service cannot be started or configured to accept incoming connections. - Disabled (0): Prevent remote access connections to this machine - Enabled (1): Allow remote access connections to this machine The recommended state for this setting is: Disabled (0) Rationale: Only approved remote access systems should be used. NOTE: If Chrome Remote Desktop is approved and required for use, then this setting can be ignored. The benchmark marks this recommendation Manual (organisation-specific value or not reliably checkable), so it is reported as SKIP with review steps.
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
Confirm via Group Policy (gpresult /h or the GPMC) that Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Remote Access\Allow remote access connections to this machine is configured as the title requires. This group policy setting is backed by the following registry location which should be set to 0: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome:RemoteAccessHostAllowRemoteAccessConnections
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Remote Access\Allow remote access connections to this machine = Disabled
Свойства
- Операционные системы
- Любая
- Теги
- chromebrowsercis-l1manual
- Источник
- CIS Google Chrome Benchmark v3.0.0 - 2.8.1 Ensure 'Allow remote access connections to this machine' is set to 'Disabled'