Microsoft Windows Server 2025
Windows Server 2025 must prevent users from changing installation options
STIG ID: WN25-CC-000420 | SRG: SRG-OS-000362-GPOS-00149 | Severity: Medium | CCI: CCI-003980 | Vulnerability ID: V-278120
Description
Installation options for applications are typically controlled by administrators. This setting prevents users from changing installation options that may bypass security features.
Check
C-82650r1181064_chk
If the following registry value does not exist or is not configured as specified, this is a finding:
Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Installer\
Value Name: EnableUserControl
Type: REG_DWORD
Value: 0x00000000 (0)
Fix
F-82555r1181065_fix
Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Installer >> Allow user control over installs to "Disabled".