Title

A Windows error report is not sent when a generic driver is installed. (Cat III impact)

Discussion

This check verifies that an error report will not be sent when a generic device driver is installed.

Check Content

If the following registry value doesn’t exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Policies\Microsoft\Windows\DeviceInstall\Settings\ Value Name: DisableSendGenericDriverNotFoundToWER Type: REG_DWORD Value: 1

Fix Text

Windows 7 - Configure the policy value for Computer Configuration -> Administrative Templates -> System -> Device Installation “Do not send a Windows Error Report when a generic driver is installed on a device” to “Enabled”.

Additional Identifiers

Rule ID:

Vulnerability ID: V-15702

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.