[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-41576-0

Platform: win10Date: (C)2016-09-23   (M)2017-10-18



Restrict the user from entering author mode Prevents users from entering author mode. This setting prevents users from opening the Microsoft Management Console (MMC) in author mode, explicitly opening console files in author mode, and opening any console files that open in author mode by default. As a result, users cannot create console files or add or remove snap-ins. Also, because they cannot open author-mode console files, they cannot use the tools that the files contain. This setting permits users to open MMC user-mode console files, such as those on the Administrative Tools menu in Windows 2000 Server family or Windows Server 2003 family. However, users cannot open a blank MMC console window on the Start menu. (To open the MMC, click Start, click Run, and type mmc.) Users also cannot open a blank MMC console window from a command prompt. If you disable this setting or do not configure it, users can enter author mode and open author-mode console files. Counter Measure: Configure this setting depending on your organization's requirements. Potential Impact: Users cannot enter the MMC in author mode.


Parameter:


Technical Mechanism: (1) GPO: User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restrict the user from entering author mode (2) REG: HKEY_USERS\Software\Policies\Microsoft\MMC\RestrictAuthorMode (3) WMI: ###

References:

Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:36544


OVAL    1
oval:org.secpod.oval:def:36544
XCCDF    2
xccdf_org.secpod_benchmark_NIST_800_171_R1_Windows_10
xccdf_org.secpod_benchmark_general_Windows_10

© 2013 SecPod Technologies