CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

18.8.34.6 SleepSettings

This section contains recommendations related to Power Management Sleep mode.

This Group Policy section is provided by the Group Policy template Power.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates.

18.8.34.6.1 (L1) Ensure 'Allow network connectivity during connected- standby (on battery)' is set to 'Disabled' (Scored)

ProfileApplicability:

 Level 1 (L1) - Corporate/Enterprise Environment (general use)

Description:

This policy setting allows you to control the network connectivity state in standby on modern standby-capable systems.

The recommended state for this setting is: Disabled .

Rationale:

Disabling this setting ensures that the computer will not be accessible to attackers over a WLAN network while left unattended, on battery and in a sleep state.

Audit:

Navigate to the UI Path articulated in the Remediation section and confirm it is set as prescribed. This group policy setting is backed by the following registry location:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8- 98b7-4186-b944-eafa664402d9:DCSettingIndex

Remediation:

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\System\Power Management\Sleep Settings\Allow network connectivity during connected-standby (on battery)

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template Power.admx/adml that is included with the Microsoft Windows 10 Release 1607 & Server 2016 Administrative Templates (or newer).

722 | P a g e