Disable binding directly to IPropertySetStorage without intermediate layers.ID: oval:org.secpod.oval:def:19391 | Date: (C)2014-05-29 (M)2023-07-14 |
Class: COMPLIANCE | Family: windows |
The Disable binding directly to IPropertySetStorage without intermediate layers. machine setting should be configured correctly.
Changes the behavior of IShellFolder::BindToObject for IID_IPropertySetStorage to not bind directly to the IPropertySetStorage implementation, and to include the intermediate layers provided by the Property System. This behavior is consistent with Windows Vista's behavior in this scenario. This disables access to user-defined properties, and properties stored in NTFS secondary streams.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Explorer\Disable binding directly to IPropertySetStorage without intermediate layers.
(2) KEY: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableBindDirectlyToPropertySetStorage
Platform: |
Microsoft Windows Server 2008 R2 |