'Do not process the legacy run list' for Computer ConfigurationID: oval:org.secpod.oval:def:27770 | Date: (C)2015-10-08 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
This policy setting causes the run list, which is a list of programs that Windows runs automatically when it starts, to be ignored. The customized run lists for Windows Vista are stored in the registry at the following locations:
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
You can enable the Do not process the legacy run list setting to help prevent a malicious user from running a program each time Windows Vista starts, which could compromise data on the computer or cause other harm. When this policy setting is enabled, certain system programs are prevented from running, such as antivirus software, and software distribution and monitoring software. Microsoft recommends to evaluate the threat level to your environment before you determine whether to use this policy setting for your organization.
This policy setting causes the run list, which is a list of programs that Windows Vista runs automatically when it starts, to be ignored.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\System\Logon!Do not process the legacy run list
(2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRun
Platform: |
Microsoft Windows Server 2012 R2 |