in

eEye Digital Security

The endpoint to vulnerability starts here.

 

Service Control - BITS Audit ID 5340 -Vista SP2

Last post 08-28-2009 11:20 AM by bpatten. 2 replies.
Page 1 of 1 (3 items)
Sort Posts: Previous Next
  • 08-20-2009 2:45 PM

    Service Control - BITS Audit ID 5340 -Vista SP2

    According to MS here:

    http://msdn.microsoft.com/en-us/library/aa362826(VS.85).aspx

    BITS is supposed to be set as a delayed auto-start.

    On the report I got from yesterday's scan of a master image machine it's supposed to be set to "manual".

    MS says it WAS supposed to be set to manual prior to Vista. But this is a Vista SP2 machine we're scanning here.

    No mention in the Retina description that this is a FDCC requirement, just that it's supposed to be set to manual.

    So what's correct here?

    Thanks,

    S.

    Filed under: , ,
  • 08-25-2009 8:49 AM In reply to

    Re: Service Control - BITS Audit ID 5340 -Vista SP2

    Bump.

    Is there anything further on this Retina issue of setting the BITS to manual startup type instead of the default delayed start?

    What's the downside of leaving it set to the Vista default of delayed startup?

    Thanks,

    S.

  • 08-28-2009 11:20 AM In reply to

    • bpatten
    • Top 10 Contributor
    • Joined on 09-24-2007
    • Irvine, CA
    • Posts 125

    Re: Service Control - BITS Audit ID 5340 -Vista SP2

    Hi S,

    This audit is for FDCC compliance. It is only an "Informational" severity level and FDCC Vista has this as "Not Defined"; this is indicative of the value in GPO, but if the service exists on the system, then it will technically be defined.  So in all actuality, even though GPO states not defined, a system could have the service set to, say, Automatic (Delayed Start).  The audit is actually recommending a definition of "Manual" which isn't necessarily a bad thing.

    If you're not trying to follow FDCC compliance, you can disregard the audit.

    Hope that helps.

    Brian

     

Page 1 of 1 (3 items)
© 1995 - 2009 eEye Incorporated