Details
Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.
The recommended state for this setting is: Disabled.
Rationale:
The function of this service is to provide a ‘demand dial’ type of functionality. In a high security environment, it is preferred that any remote ‘dial’ connections (whether they be legacy dial-in POTS or VPN) are initiated by the user, not automatically by the system.
Solution
To establish the recommended configuration via GP, set the following UI path to: Disabled.
Computer ConfigurationPoliciesWindows SettingsSecurity SettingsSystem ServicesRemote Access Auto Connection Manager
Impact:
‘Dial on demand’ functionality will no longer operate – remote dial-in (POTS) and VPN connections must be initiated manually by the user.
Default Value:
Manual
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.