Title

The print driver installation privilege will be restricted to administrators. (Cat III impact)

Discussion

Allowing users to install drivers can introduce malware or cause the instability of a system. This capability should be restricted to the Administrators and Print Operators groups.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “Devices: Prevent users from installing printer drivers” to “Enabled”.

Additional Identifiers

Rule ID: SV-32299r1_rule

Vulnerability ID: V-1151

Group Title: Secure Print Driver Installation

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.