Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Windows 10 Mobile must be configured to implement the management setting: Disable the capability for a user to manually unenroll from MDM management.
Description
Discussion Text
The use of an MDM allows an organization to assign values to security-related parameters across all the devices it manages. This provides assurance that the required mobile OS security controls are being enforced and that the device user or an adversary has not modified or disabled the controls. If a user has the ability on their device to manually unenroll from MDM management, this removes all IA controls and exposes the device and the user to a number of threat vectors and takes them out of compliance.
Disabling this feature mitigates the risk from loss of control and ensures that the devices maintain the required locked down state.
SFR ID: FMT_SMF_EXT.1.1 #45
Disabling this feature mitigates the risk from loss of control and ensures that the devices maintain the required locked down state.
SFR ID: FMT_SMF_EXT.1.1 #45
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.