Check: 3.112
Win2k8 R2 Audit:
3.112
(in version v1 r8)
Title
Group Policy objects will be reprocessed even if they have not changed. (Cat II impact)
Discussion
Enabling this setting and then selecting the "Process even if the Group Policy objects have not changed" option ensures that the policies will be reprocessed even if none have been changed. This way, any unauthorized changes are forced to match the domain-based group policy settings again.
Check Content
Fix Text
Configure the policy value for Computer Configuration -> Administrative Templates -> System -> Group Policy “Registry Policy Processing” to “Enabled” and select the option “Process even if the Group Policy objects have not changed”.
Additional Identifiers
Rule ID: SV-32364r1_rule
Vulnerability ID: V-4448
Group Title: Group Policy - Registry Policy Processing
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| No CCIs are assigned to this check |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| No controls are assigned to this check |