|Platform: win2012r2||Date: (C)2015-10-08 (M)2018-07-10|
Do not process the legacy run list
This policy setting causes the run list, which is a list of programs that Windows runs automatically when it starts, to be ignored. The customized run lists for Windows Vista are stored in the registry at the following locations:
You can enable the Do not process the legacy run list setting to help prevent a malicious user from running a program each time Windows Vista starts, which could compromise data on the computer or cause other harm. When this policy setting is enabled, certain system programs are prevented from running, such as antivirus software, and software distribution and monitoring software. Microsoft recommends to evaluate the threat level to your environment before you determine whether to use this policy setting for your organization.
(1) GPO: Computer Configuration\Administrative Templates\System\Logon!Do not process the legacy run list
(2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRun
|SCAP Repo OVAL Definition||oval:org.secpod.oval:def:27770|