Title

The print driver installation privilege must be restricted to administrators. (Cat III impact)

Discussion

Allowing users to install drivers can introduce malware or cause the instability of a system. Print driver installation should be restricted to administrators.

Check Content

If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers\ Value Name: AddPrinterDrivers Value Type: REG_DWORD Value: 1

Fix Text

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> "Devices: Prevent users from installing printer drivers" to "Enabled".

Additional Identifiers

Rule ID: SV-226349r852153_rule

Vulnerability ID: V-226349

Group Title: SRG-OS-000362-GPOS-00149

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.