The 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' setting should be configured correctly.
[enabled/disabled]
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)
oval:org.secpod.oval:def:8776
SCAP Repo OVAL Definition
2013-01-21