[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Prohibit removal of updates

ID: oval:org.secpod.oval:def:28663Date: (C)2015-10-14   (M)2023-07-04
Class: COMPLIANCEFamily: windows




This setting controls the ability for users or administrators to remove Windows Installer based updates. This setting should be used if you need to maintain a tight control over updates. One example is a lockdown environment where you want to ensure that updates once installed cannot be removed by users or administrators. If you enable this policy setting, updates cannot be removed from the computer by a user or an administrator. The Windows Installer can still remove an update that is no longer applicable to the product. If you disable this policy setting, a user can remove an update from the computer only if the user has been granted privileges to remove the update. This can depend on whether the user is an administrator, whether Disable Windows Installer and Always install with elevated privileges policy settings are set, and whether the update was installed in a per-user managed, per-user unmanaged, or per-machine context. Fix: (1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Installer!Prohibit removal of updates (2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer!DisablePatchUninstall

Platform:
Microsoft Windows 8.1
Reference:
CCE-32958-1
CPE    1
cpe:/o:microsoft:windows_8.1
CCE    1
CCE-32958-1
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_8_1

© SecPod Technologies