Remote Registry (RemoteRegistry)ID: oval:org.secpod.oval:def:80616 | Date: (C)2022-06-02 (M)2023-12-13 |
Class: COMPLIANCE | Family: windows |
Enables remote users to modify registry settings on this computer
In a high security environment, exposing the registry to remote access is an increased
security risk.
Default: Disabled
Counter Measure:
The recommended state for this setting is Disabled.
Potential Impact:
The registry can be modified only by users on the computer.
Note: Many remote administration tools, such as System Center Configuration Manager
(SCCM), require the Remote Registry service to be operational for remote management. In
addition, many vulnerability scanners use this service to access the registry remotely.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Remote Registry
(2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry!Start
Platform: |
Microsoft Windows 10 |