The Recovery Console SET command must be disabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1158	WN08-SO-000072	SV-48052r1_rule	ECCD-1 ECCD-2	Low

Description
The Recovery Console SET command allows environment variables to be set in the Recovery Console. This permits access to all drives and folders and the copying of files to removable media which could expose sensitive information.

STIG	Date
Windows 8 / 8.1 Security Technical Implementation Guide	2015-03-09

Details

Check Text ( None )
None

Fix Text (F-41190r1_fix)
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> "Recovery Console: Allow floppy copy and access to all drives and folders" to "Disabled".