Detections
Analytics

4.7.2 (L1) Ensure 'Configure Redirection Guard: Redirection Guard Options' is set to 'Enabled: Redirection Guard Enabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting determines whether Redirection Guard is enabled for the print spooler. Redirection Guard can prevent file redirections from being used within the print spooler.

The recommended state for this setting is: Enabled: Redirection Guard Enabled

This setting prevents non-administrators from redirecting files within the print spooler process.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled: Redirection Guard Enabled :

Administrative Templates\Printers\Configure Redirection Guard: Redirection Guard Options

Impact:

None - this is default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/21719

Item Details

References: CSCv7|8.3

Plugin: Windows

Control ID: 3458215652328de96a505c41f76fe21f565df675c3ddb137680f5db8f8ab1df0