Detections
Analytics
WINCC-000029 - Group Policies must be refreshed in the background if the user is logged on.
Information
If this setting is enabled, then Group Policy settings are not refreshed while a user is currently logged on. This could lead to instances when a user does not have the latest changes to a policy applied and is therefore operating in an insecure context.Solution
Configure the policy value for Computer Configuration -> Administrative Templates -> System -> Group Policy -> 'Turn off background refresh of Group Policy' to 'Disabled'.See Also
http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip
Item Details
Audit Name: DISA Windows Vista STIG v6r41
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-51981r1_rule, STIG-ID|WINCC-000029, Vuln-ID|V-3469
Plugin: Windows
Control ID: 7eb04310abcb4dfd15954a620d2df27354641e99361b706864beeb6b8e2fa946