CCE-36348-1Platform: cpe:/o:microsoft:windows_server_2012::r2 | Date: (C)2015-10-08 (M)2023-07-04 |
Do not sync desktop personalization
Prevent the 'desktop personalization' group from syncing to and from this PC. This turns off and disables the 'desktop personalization' group on the 'sync your settings' page in PC settings.
If you enable this policy setting, the 'desktop personalization' group will not be synced.
Use the option 'Allow users to turn desktop personalization syncing on' so that syncing it turned off by default but not disabled.
If you do not set or disable this setting, syncing of the 'desktop personalization' group is on by default and configurable by the user.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsSync your settings!Do not sync desktop personalization
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsSettingSync!DisableDesktopThemeSettingSync
CCSS Severity: | CCSS Metrics: |
CCSS Score : 5.5 | Attack Vector: LOCAL |
Exploit Score: 1.8 | Attack Complexity: LOW |
Impact Score: 3.6 | Privileges Required: NONE |
Severity: MEDIUM | User Interaction: REQUIRED |
Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N | Scope: UNCHANGED |
| Confidentiality: HIGH |
| Integrity: NONE |
| Availability: NONE |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:27438 |