Check: WINCC-000001
Windows 2003 DC STIG:
WINCC-000001
(in version v6 r40)
Title
The Windows Installer Always install with elevated privileges must be disabled. (Cat I impact)
Discussion
Standard user accounts must not be granted elevated privileges. Enabling Windows Installer to elevate privileges when installing applications can allow malicious persons and applications to gain full control of a system.
Check Content
Fix Text
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Installer -> "Always install with elevated privileges" to "Disabled".
Additional Identifiers
Rule ID: SV-46216r1_rule
Vulnerability ID: V-34974
Group Title:
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-001812 |
The information system prohibits user installation of software without explicit privileged status. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-11(2) |
Prohibit Installation Without Privileged Status |