CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Remediation:

To establish the recommended configuration via GP, set the following UI path to Disabled:

Computer Configuration\Administrative Templates\Windows Components\Windows Remote Shell\Allow Remote Shell Access

Note: This Group Policy path is provided by the Group Policy template WindowsRemoteShell.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates.

Impact:

New Remote Shell connections are not allowed and are rejected by the workstation.

Default Value:

Enabled. (New Remote Shell connections are allowed.)

References:

1. CCE-33740-2

1168 | P a g e