5.22 Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'

Information

Offers routing services to businesses in local area and wide area network environments.

The recommended state for this setting is: Disabled.

Rationale:

This service's main purpose is to provide Windows router functionality - this is not an appropriate use of workstations in an enterprise managed environment.

Solution

To establish the recommended configuration via GP, set the following UI path to: Disabled.

Computer Configuration\Policies\Windows Settings\Security Settings\System Services\Routing and Remote Access

Impact:

The computer will not be able to be configured as a Windows router between different connections.

Default Value:

Disabled

See Also

https://workbench.cisecurity.org/files/2700

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Windows

Control ID: 991b577ef7c176a8037680f59ce54928ccf27428b337634d906c53126ba78a33