CCE-37976-8Platform: win2012r2 | Date: (C)2015-10-08 (M)2022-10-10 |
Enable Active Desktop
Enables Active Desktop and prevents users from disabling it.
This setting prevents users from trying to enable or disable Active Desktop while a policy controls it.
If you disable this setting or do not configure it, Active Desktop is disabled by default, but users can enable it.
Note: If both the 'Enable Active Desktop' setting and the 'Disable Active Desktop' setting are enabled, the 'Disable Active Desktop' setting is ignored. If the 'Turn on Classic Shell' setting ( in User Configuration\Administrative Templates\Windows Components\Windows Explorer) is enabled, Active Desktop is disabled, and both of these policies are ignored.
Parameter:
Technical Mechanism:
(1) GPO: User Configuration\Administrative Templates\Desktop\Desktop!Enable Active Desktop
(2) REG: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceActiveDesktopOn
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:28337 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:28337 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:28337 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:28337 |