1. Home
  2. Security Hardening
  3. CIS Microsoft Windows Server 2019 STIG DC L2 V1.0.1
  4. Ensure ‘Enable/Disable PerfTrack’ is set to ‘Disabled’

Ensure ‘Enable/Disable PerfTrack’ is set to ‘Disabled’

Details

This policy setting specifies whether to enable or disable tracking of responsiveness events.

The recommended state for this setting is: Disabled.

Rationale:

When enabled the aggregated data of a given event will be transmitted to Microsoft. The option exists to restrict this feature for a specific user, set the consent level, and designate specific programs for which error reports could be sent. However, centrally restricting the ability to execute PerfTrack to limit the potential for unauthorized or undesired usage, data leakage, or unintentional communications is highly recommended.

Impact:

Responsiveness events are not processed.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled:

Computer ConfigurationPoliciesAdministrative TemplatesSystemTroubleshooting and DiagnosticsWindows Performance PerfTrackEnable/Disable PerfTrack

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template PerformancePerftrack.admx/adml that is included with the Microsoft Windows 7 & Server 2008 R2 Administrative Templates (or newer).

Default Value:

Enabled. (Responsiveness events are processed and aggregated. The aggregated data will be transmitted to Microsoft through SQM.)

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management, Identification and Authentication.This control applies to the following type of system Windows.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles