CCE-44331-7Platform: win10 | Date: (C)2016-09-23 (M)2022-10-10 |
Disable: 'Time (in seconds) to force reboot when required for policy changes to take effect' for ForceReboot
Set the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in device installation restriction policies.
If you enable this setting, set the amount of seconds you want the system to wait until a reboot.
If you disable or do not configure this setting, the system will not force a reboot.
NOTE: If no reboot is forced, the device installation restriction right will not take effect until the system is restarted.
Counter Measure:
Configure this setting depending on your organization's requirements.
Potential Impact:
System restart will occur the specified number of seconds after a change in the device installation policies.
Parameter:
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\System\Device Installation\Device Installation Restrictions\Time (in seconds) to force reboot when required for policy changes to take effect
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\ForceReboot,RebootTime
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:35429 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:35429 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:35429 |