[Forgot Password]
Login  Register Subscribe

23631

 
 

119105

 
 

98250

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
OVAL

Disable: 'Restrict the user from entering author mode'

ID: oval:org.secpod.oval:def:36544Date: (C)2016-08-05   (M)2017-10-23
Class: COMPLIANCEFamily: windows




Prevents users from entering author mode. This setting prevents users from opening the Microsoft Management Console (MMC) in author mode, explicitly opening console files in author mode, and opening any console files that open in author mode by default. As a result, users cannot create console files or add or remove snap-ins. Also, because they cannot open author-mode console files, they cannot use the tools that the files contain. This setting permits users to open MMC user-mode console files, such as those on the Administrative Tools menu in Windows 2000 Server family or Windows Server 2003 family. However, users cannot open a blank MMC console window on the Start menu. (To open the MMC, click Start, click Run, and type mmc.) Users also cannot open a blank MMC console window from a command prompt. If you disable this setting or do not configure it, users can enter author mode and open author-mode console files. Counter Measure: Configure this setting depending on your organization's requirements. Potential Impact: Users cannot enter the MMC in author mode. Fix: (1) GPO: User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restrict the user from entering author mode (2) REG: HKEY_USERS\Software\Policies\Microsoft\MMC\RestrictAuthorMode (3) WMI: ###

Platform:
Microsoft Windows 10
Reference:
CCE-41576-0
CCE    1
CCE-41576-0
XCCDF    2
xccdf_org.secpod_benchmark_general_Windows_10
xccdf_org.secpod_benchmark_NIST_800_171_R1_Windows_10

© 2013 SecPod Technologies