TMA-CHROME-2.8.3
Ensure 'Configure the required domain names for remote access clients' is set to 'Enabled' with a domain defined
Mô tả
Chrome allows the configuration of a list of domains that are allowed to access the user's system. When enabled, remote systems can only connect if they are one of the specified domains listed. Setting this to an empty list (Disabled) allows remote systems from any domain to connect to this user's system. Rationale: Remote assistance connections shall be restricted. The benchmark marks this recommendation Manual (organisation-specific value or not reliably checkable), so it is reported as SKIP with review steps.
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.
Confirm via Group Policy (gpresult /h or the GPMC) that Computer Configuration\Polices\Administrative Templates\Google\Google Chrome\Remote access\Configure the required domain names for remote access clients is configured as the title requires. This registry path will not exist if it is set to Disabled: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\RemoteAccessHostClientDomainList
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Configure through Group Policy: Computer Configuration\Polices\Administrative Templates\Google\Google Chrome\Remote access\Configure the required domain names for remote access clients = Enabled and enter an organizational specific domain(s) (e.g. nodomain.local)
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- chromebrowsercis-l1manual
- Tham chiếu
- CIS Google Chrome Benchmark v3.0.0 - 2.8.3 Ensure 'Configure the required domain names for remote access clients' is set to 'Enabled' with a domain defined