Disallow Interactive Users from generating Resultant Set of Policy dataID: oval:org.secpod.oval:def:19572 | Date: (C)2014-05-29 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
The Disallow Interactive Users from generating Resultant Set of Policy data machine setting should be configured correctly.
This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged on users can view their own Resultant Set of Policy (RSoP) data. If this setting is enabled, interactive users cannot generate RSoP data. If this setting is not configured or disabled, interactive Users can generate RSoP.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\System\Group Policy\Disallow Interactive Users from generating Resultant Set of Policy data
(2) KEY: HKLM\Software\Policies\Microsoft\Windows\System\DenyRsopToInteractiveUser
Platform: |
Microsoft Windows Server 2008 R2 |