Enable user control over installs
|ID: oval:gov.nist.usgcb.windowsseven:def:295||Date: (C)2012-04-13 (M)2017-10-26|
|Class: COMPLIANCE||Family: windows|
Permits users to change installation options that typically are available only to system administrators.
This setting bypasses some of the security features of Windows Installer. It permits installations to complete that otherwise would be halted due to a security violation.
The security features of Windows Installer prevent users from changing installation options typically reserved for system administrators, such as specifying the directory to which files are installed. If Windows Installer detects that an installation package has permitted the user to change a protected option, it stops the installation and displays a message. These security features operate only when the installation program is running in a privileged security context in which it has access to directories denied to the user.
This setting is designed for less restrictive environments. It can be used to circumvent errors in an installation program that prevents software from being installed.
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Installer\Enable user control over installs
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer!EnableUserControl
|Microsoft Windows 7|