Navigate

Check: 5.211

Windows 2008 Domain Controller STIG: 5.211 (in versions v6 r47 through v6 r35)

Title

Driver Install – Device Driver Search Prompt (Cat III impact)

Discussion

This check verifies that users will not be prompted to search Windows Updated for device drivers.

Check Content

If the following registry value doesn’t exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Policies\Microsoft\Windows\DriverSearching\ Value Name: DontPromptForWindowsUpdate Type: REG_DWORD Value: 1

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> System -> Driver Installation “Turn off Windows Update device driver search prompt” to “Enabled”.

Additional Identifiers

Rule ID: SV-29564r1_rule

Vulnerability ID: V-15703

Group Title: Driver Install – Device Driver Search Prompt

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-001812	The information system prohibits user installation of software without explicit privileged status.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
CM-11(2)	Prohibit Installation Without Privileged Status