General: Solicited Remote Assistance must not be allowed

ac242343-8a24-414b-8615-7de95dffd90d

Remote assistance allows another user to view or take control of the local session of a user. Solicited assistance is help that is specifically requested by the local user. This may allow unauthorized parties access to the resources on the computer. It is best practice and required for some certifications to be disabled.

Remote assistance allows another user to view or take control of the local session of a user. Solicited assistance is help that is specifically requested by the local user and may allow unauthorized parties access to the resources on the computer.

Remediation

To fix this configure the policy value for
Computer Configuration
|_ Administrative Templates
|_ System
|_ Remote Assistance
|_"Configure Solicited Remote Assistance" to "Disabled".

More info: https://www.tenforums.com/tutorials/116749-enable-disable-remote-assistance-connections-windows.html

STIG: Desktop:

W11:https://www.stigviewer.com/stig/microsoft_windows_11/2023-09-29/finding/V-253382
W10: https://www.stigviewer.com/stig/microsoft_windows_10/2023-09-29/finding/V-220823 / https://www.stigviewer.com/stig/windows_10/2021-08-18/finding/V-220823

NIST 800-53: CM-6, CM-7
NIST 800-171 rev 3 FPD: 3.4.2.b
CSCv7:9.2