Title

Secure Removable Media – CD-ROM (Cat III impact)

Discussion

This check verifies that Windows is configured to not limit access to CD drives when a user is logged on locally.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “Devices: Restrict CD-ROM access to locally logged-on user only” to “Disabled”.

Additional Identifiers

Rule ID: SV-25036r1_rule

Vulnerability ID: V-17373

Group Title: Secure Removable Media – CD-ROM

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.