WN11-CC-000310 - Users must be prevented from changing installation options.

Information

Installation options for applications are typically controlled by administrators. This setting prevents users from changing installation options that may bypass security features.

Solution

Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Installer >> 'Allow user control over installs' to 'Disabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V1R2_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-11(2), CAT|II, CCI|CCI-001812, Rule-ID|SV-253410r829314_rule, STIG-ID|WN11-CC-000310, Vuln-ID|V-253410

Plugin: Windows

Control ID: 78e80c85c0864cdd2735c21f29c8f5694cdb98b34ab2f5bf9a7952eef81ae6ee