[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-38309-1

Platform: win2012r2Date: (C)2015-10-08   (M)2022-10-10



Enforce Show Policies Only This policy setting prevents administrators from viewing or using Group Policy preferences. A Group Policy administration (.adm) file can contain both true settings and preferences. True settings, which are fully supported by Group Policy, must use registry entries in the Software\Policies or Software\Microsoft\Windows\CurrentVersion\Policies registry subkeys. Preferences, which are not fully supported, use registry entries in other subkeys. If you enable this policy setting, the 'Show Policies Only' command is turned on, and administrators cannot turn it off. As a result, Group Policy Object Editor displays only true settings; preferences do not appear. If you disable or do not configure this policy setting, the 'Show Policies Only' command is turned on by default, but administrators can view preferences by turning off the 'Show Policies Only' command. Note: To find the 'Show Policies Only' command, in Group Policy Object Editor, click the Administrative Templates folder (either one), right-click the same folder, and then point to 'View.' In Group Policy Object Editor, preferences have a red icon to distinguish them from true settings, which have a blue icon.


Parameter:


Technical Mechanism:

(1) GPO: User Configuration\Administrative Templates\System\Group Policy!Enforce Show Policies Only (2) REG: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Group Policy Editor!ShowPoliciesOnly

CCSS Severity:CCSS Metrics:
CCSS Score : Attack Vector:
Exploit Score: Attack Complexity:
Impact Score: Privileges Required:
Severity: User Interaction:
Vector: Scope:
 Confidentiality:
 Integrity:
 Availability:
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:28547
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:28547
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:28547
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:28547


OVAL    1
oval:org.secpod.oval:def:28547

© SecPod Technologies