Detections
Analytics

4.11.10.1 Ensure 'Enable App Installer Experimental Features' is set to 'Disabled'

Information

This policy setting controls whether users can enable experimental features in the Windows Package Manager.

The recommended state for this setting is Disabled.

Windows Package Manager is a command line tool can be used to discover, install, upgrade, remove and configure applications, and it can be used as a distribution channel for software packages containing tools and applications. Users should not have access to experimental features.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Disabled :

Administrative Templates\Windows Components\Desktop App Installer\Enable App Installer Experimental Features

Impact:

Users will not have access to experimental features in the command line tool, winget to discover, install, upgrade, remove, configure, or distribute applications.

See Also

https://workbench.cisecurity.org/benchmarks/27282

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 574ae5577b789411f944a15f72b316bd41526bb184b086133d75cb16e5d654d8