CCE-43372-2Platform: win10 | Date: (C)2016-09-23 (M)2022-10-10 |
Prevent access to registry editing tools
This policy setting disables the Windows registry editors Regedit.exe and Regedt32.exe.
Counter Measure:
Enable this setting.
Potential Impact:
If you enable this policy setting, a message will display when users try to use a registry editor that informs them that they cannot use either of these editors. This policy setting removes the ability of users and intruders to access the registry with these tools, but does not prevent access to the registry itself.
Parameter:
Technical Mechanism:
(1) GPO: User Configuration\Administrative Templates\System\Prevent access to registry editing tools
(2) REG: HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools
(3) WMI: ###
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:36470 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:36470 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:36470 |