1.134 WN16-CC-000450

Information

Users must be prevented from changing installation options.

GROUP ID: V-224953
RULE ID: SV-224953r982210

Installation options for applications are typically controlled by administrators. This setting prevents users from changing installation options that may bypass security features.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Windows Installer >> 'Allow user control over installs' to 'Disabled'

See Also

https://workbench.cisecurity.org/benchmarks/23093