TMAegisBeta
更多 chrome 规则

Google Chrome

TMA-CHROME-2.8.1

Ensure 'Allow remote access connections to this machine' is set to 'Disabled'

高级别 1人工审核chrome

说明

This is a setting for Chrome Remote desktop. If this setting is Disabled, the remote access host service cannot be started or configured to accept incoming connections. - Disabled (0): Prevent remote access connections to this machine - Enabled (1): Allow remote access connections to this machine The recommended state for this setting is: Disabled (0) Rationale: Only approved remote access systems should be used. NOTE: If Chrome Remote Desktop is approved and required for use, then this setting can be ignored. The benchmark marks this recommendation Manual (organisation-specific value or not reliably checkable), so it is reported as SKIP with review steps.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时,扫描结果会列出该项并附带这些说明。

Confirm via Group Policy (gpresult /h or the GPMC) that Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Remote Access\Allow remote access connections to this machine is configured as the title requires. This group policy setting is backed by the following registry location which should be set to 0: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome:RemoteAccessHostAllowRemoteAccessConnections

修复方式

修复方法: 操作指南或基础设施补丁

Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Remote Access\Allow remote access connections to this machine = Disabled

属性

操作系统
任意
标签
chromebrowsercis-l1manual
参考
CIS Google Chrome Benchmark v3.0.0 - 2.8.1 Ensure 'Allow remote access connections to this machine' is set to 'Disabled'