Detections
Analytics

1.167 WN11-CC-000310

Information

Users must be prevented from changing installation options.

GROUP ID: V-253410
RULE ID: SV-253410r1051053

Installation options for applications are typically controlled by administrators. This setting prevents users from changing installation options that may bypass security features.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Windows Installer >> 'Allow user control over installs'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-11(2), CCI|CCI-001812, CCI|CCI-003980, Rule-ID|SV-253410r1051053_rule, STIG-ID|WN11-CC-000310, Vuln-ID|V-253410

Plugin: Windows

Control ID: 04801ba6a461f7d9df802bad8f5c70e18ee5d3aa720fa19a747876f986bec2bb