CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

5.7 (L1) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled' or 'Not Installed' (Scored)

ProfileApplicability:

 Level 1 (L1) - Corporate/Enterprise Environment (general use)

Description:

Detects other Infrared devices that are in range and launches the file transfer application.

The recommended state for this setting is: Disabled or Not Installed .

Rationale:

Infrared connections can potentially be a source of data compromise - especially via the automatic "file transfer application" functionality. Enterprise-managed systems should utilize a more secure method of connection than infrared.

Audit:

Navigate to the UI Path articulated in the Remediation section and confirm it is set as prescribed. This group policy setting is backed by the following registry location:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\irmon:Start

Remediation:

To establish the recommended configuration via GP, set the following UI path to: Disabled or ensure the service is not installed.

Computer Configuration\Policies\Windows Settings\Security Settings\System Services\Infrared monitor service

Impact:

Infrared file transfers will be prevented from working.

Default Value:

Windows 10 R1607 through Windows 10 R1809: Manual

Windows 10 R1903 and newer: Not Installed (Manual when installed)

308 | P a g e