5.243 - Windows Installer - Vendor Signed Updates

Information

This check verifies that users are prevented applying vendor signed updates.

Solution

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Installer 'Prohibit non-administrators from applying vendor signed updates' to 'Enabled'.

See Also

http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip