1.164 WN10-CC-000310

Information

Users must be prevented from changing installation options.

GROUP ID: V-220856RULE ID: SV-220856r1051031

Installation options for applications are typically controlled by administrators. This setting prevents users from changing installation options that may bypass security features.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Windows Installer >> 'Allow user control over installs'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/23869