Detections
Analytics

1.168 WN11-CC-000315

Information

The Windows Installer feature 'Always install with elevated privileges' must be disabled.

GROUP ID: V-253411
RULE ID: SV-253411r1051054

Standard user accounts must not be granted elevated privileges. Enabling Windows Installer to elevate privileges when installing applications can allow malicious persons and applications to gain full control of a system.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Windows Installer >> 'Always install with elevated privileges'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-11(2), CCI|CCI-001812, CCI|CCI-003980, Rule-ID|SV-253411r1051054_rule, STIG-ID|WN11-CC-000315, Vuln-ID|V-253411

Plugin: Windows

Control ID: c52c6caadd8c2dbcdbcb89ae649555dd0dcca3e69c3a147afe42389e75e12df8