Title

Prevent the Application Compatibility Program Inventory from collecting data and sending the information to Microsoft. (Cat III impact)

Discussion

This setting will prevent the Program Inventory from collecting data about a system and sending the information to Microsoft.

Check Content

If the following registry value doesn’t exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Policies\Microsoft\Windows\AppCompat\ Value Name: DisableInventory Type: REG_DWORD Value: 1

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Application Compatibility -> “Turn off Program Inventory” to “Enabled”.

Additional Identifiers

Rule ID: SV-25297r1_rule

Vulnerability ID: V-21971

Group Title: Application Compatibility Program Inventory

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.