5.22 Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'

Information

Offers routing services to businesses in local area and wide area network environments.

The recommended state for this setting is: 'Disabled'.

Rationale:
This service's main purpose is to provide Windows router functionality - this is not an appropriate use of workstations in an enterprise managed environment.

Solution

To establish the recommended configuration via GP, set the following UI path to: 'Disabled'.


Computer Configuration\Policies\Windows Settings\Security Settings\System Services\Routing and Remote Access


Impact:
The computer will not be able to be configured as a Windows router between different connections.

See Also

https://workbench.cisecurity.org/files/1929

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7

Plugin: Windows

Control ID: 6ee3fe4cb9d3ebf7e462b233e455792bc9c4a5cf8f97cc7d795318017f403f0d