5.4 Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'

Information

Windows service for application access to downloaded maps. This service is started on-demand by application accessing downloaded maps.

Rationale:

Mapping technologies can unwillingly reveal your location to attackers and other software that picks up the information. In addition, automatic downloads of data from 3rd-party sources should be minimized when not needed. Therefore this service should not be needed in high security environments.

Impact:

Applications will be prevented from accessing maps data.

Solution

To establish the recommended configuration via GP, set the following UI path to: Disabled.

Computer Configuration\Policies\Windows Settings\Security Settings\System Services\Downloaded Maps Manager

Default Value:

Automatic (Delayed Start)

See Also

https://workbench.cisecurity.org/files/2992