CCE-35111-4Platform: cpe:/o:microsoft:windows_8.1 | Date: (C)2015-10-14 (M)2023-07-04 |
Configure Automatic Updates
This policy setting specifies whether computers in your environment will receive security updates from Windows Update or WSUS. If you configure this policy setting to Enabled, the operating system will recognize when a network connection is available and then use the network connection to search Windows Update or your designated intranet site for updates that apply to them.
After you configure this policy setting to Enabled, select one of the following three options in the Configure Automatic Updates Properties dialog box to specify how the service will work:
- Notify before downloading any updates and notify again before installing them.
- Download the updates automatically and notify when they are ready to be installed. (Default setting)
- Automatically download updates and install them on the schedule specified below.
If you disable this policy setting, you will need to download and manually install any available updates from Windows Update.
Parameter:
[enable/disable, notify for download and notify for install/auto download and notify for install/auto download and schedule the install/allow local admin to choose setting, 0 - every day/1 - every sunday/2 - every monday/3 - every tuesday/4 - every wednesday/5 - every thursday/6 - every friday/7 - every saturday, install time of day in 24-hour format]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows Update!Configure Automatic Updates
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsWindowsUpdateAU!NoAutoUpdate
CCSS Severity: | CCSS Metrics: |
CCSS Score : 7.5 | Attack Vector: NETWORK |
Exploit Score: 1.6 | Attack Complexity: HIGH |
Impact Score: 5.9 | Privileges Required: LOW |
Severity: HIGH | User Interaction: NONE |
Vector: AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| Confidentiality: HIGH |
| Integrity: HIGH |
| Availability: HIGH |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:22481 |