1.1.3.10.7 Set 'Network access: Remotely accessible registry paths and sub-paths' to the following list

Information

This policy setting determines which registry paths and sub-paths will be accessible when an application or
process references the WinReg key to determine access permissions.

Solution

Make sure Remotely accessible registry paths are set to 'System\CurrentControlSet\Control\Print\Printers',
'System\CurrentControlSet\Services\Eventlog',
'Software\Microsoft\OLAP Server',
'Software\Microsoft\Windows NT\CurrentVersion\Print',
'Software\Microsoft\Windows NT\CurrentVersion\Windows',
'System\CurrentControlSet\Control\ContentIndex',
'System\CurrentControlSet\Control\Terminal Server',
'System\CurrentControlSet\Control\Terminal Server\UserConfig',
'System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration',
'Software\Microsoft\Windows NT\CurrentVersion\Perflib',
'System\CurrentControlSet\Services\SysmonLog'.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(7)(b), CSCv6|14, CSCv6|16

Plugin: Windows

Control ID: 475ff9f735f548a4659bc36977615a71e1b2a06cd2b916b7727fa2da1b594672