3.6.9.3 (L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'

Information

This policy setting determines whether to require domain users to elevate when setting a network's location.

The recommended state for this setting is: Enabled

Allowing regular users to set a network location increases the risk and attack surface.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled

Administrative Templates\Network\Network Connections\Require domain users to elevate when setting a network's location

Impact:

Domain users must elevate when setting a network's location.

See Also

https://workbench.cisecurity.org/benchmarks/16853

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-2(9), CSCv7|4.3

Plugin: Windows

Control ID: 5fde3fab2ca77017e3aea10e7238a673067a84e4d797c475a6313841abb4d371