[Forgot Password]
Login  Register Subscribe

23631

 
 

115083

 
 

97389

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-37490-0

Platform: win2012r2Date: (C)2015-10-08   (M)2017-10-31



Always install with elevated privileges This policy setting directs Windows Installer to use elevated permissions when it installs any program on the system. If you enable this policy setting, privileges are extended to all programs. These privileges are usually reserved for programs that have been assigned to the user (offered on the desktop), assigned to the computer (installed automatically), or made available in Add or Remove Programs in Control Panel. This profile setting lets users install programs that require access to directories that the user might not have permission to view or change, including directories on highly restricted computers. If you disable or do not configure this policy setting, the system applies the current user's permissions when it installs programs that a system administrator does not distribute or offer. Note: This policy setting appears both in the Computer Configuration and User Configuration folders. To make this policy setting effective, you must enable it in both folders. Caution: Skilled users can take advantage of the permissions this policy setting grants to change their privileges and gain permanent access to restricted files and folders. Note that the User Configuration version of this policy setting is not guaranteed to be secure.


Parameter:


Technical Mechanism: (1) GPO: User Configuration\Administrative Templates\Windows Components\Windows Installer!Always install with elevated privileges (2) REG: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated

References:

Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:28033


OVAL    1
oval:org.secpod.oval:def:28033
XCCDF    3
xccdf_org.secpod_benchmark_PCI_3_2_Windows_Server_2012_R2
xccdf_org.secpod_benchmark_general_Windows_2012_R2
xccdf_org.secpod_benchmark_NIST_800_171_R1_Windows_Server_2012_R2

© 2013 SecPod Technologies