Back

Disable ClipBook unless ClipBook use is absolutely necessary.


CONTROL ID
01813
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Disable all unnecessary services unless otherwise noted in a policy exception., CC ID: 00880

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • This service is used to transfer clipboard information from one computer to another computer. For stand-alone computers, it is rarely used. This service should be Disabled. (Pg 23, The Center for Internet Security Windows 2000 Benchmark, 2.2.1)
  • This service allows users to share information on their clipboard over a network. This service should be Disabled. The permissions on this service should also be Administrator: Full Control; System: Read, Start, Stop, and Pause. (§ 4.1.2, The Center for Internet Security Windows 2000 Professional Benchmark, 2.2.1)
  • This service is used to transfer clipboard information from one computer to another computer. For stand-alone computers, it is rarely used. This service should be Disabled. (§ 23, The Center for Internet Security Windows 2000 Professional Operating System Level 2 Benchmark, 2.2.1)
  • This service allows users over a network to share clipboard information. This setting should be Disabled. (§ 4.1.2, The Center for Internet Security Windows 2000 Server Benchmark, 2.2.1)
  • The ClipBook service allows data from the clipboard to be shared across a network. This service should be Disabled. The permissions for this service should be Administrators: Full Control; System: Read, Start, Stop, and Pause. (Pg 23, The Center for Internet Security Windows NT Benchmark, 1.0.5)
  • The organization must only enable Clipbook if absolutely necessary. The Clipbook service is used to share clipboard information between computers on a network. (§ 4.1.4, The Center for Internet Security Windows XP Professional SP1/SP2 Benchmark, 2.01)
  • Table F-1: For Windows 2000 Server, the organization must configure the permissions for Clipbook to Administrators: Full Control; System: Read; and System: Start, Stop, and Pause. Table F-2: For Windows 2003 Server, the organization must configure the permissions for Clipbook (ClipSrv) to Administra… (Table F-1, Table F-2, Table F-3, Table F-4, CMS Business Partners Systems Security Manual, Rev. 10)
  • The Clipbook service should be disabled. The service should be documented if enabling it is required. (§ 5.2.2.1, DISA Windows Server 2003 Security Checklist, Version 6 Release 1.11)
  • The Clipbook service should be Disabled, unless absolutely necessary. If it is Enabled, there should be a documented and justified reason. (§ 5.2.2.1, DISA Windows XP Security Checklist, Version 6 Release 1.11)
  • For all Windows XP environments, this service should be Disabled. (§ 6.5, Guidance for Securing Microsoft Windows XP Systems for IT Professionals, NIST SP 800-68, Revision 1)
  • This service lets users create and share data over remote computers. The Clipbook service should be Disabled. (Pg 67, NSA Guide to Security Microsoft Windows XP)