Back
  • Misconfig Name
  • "Always install with elevated privileges" is not disabled
  • Description
  • "Always install with elevated privileges" must be disabled as it allows a standard user to install a Microsoft Windows Installer Package (MSI) with system privileges. This can be exploited by an attacker in order to escalate his privileges to gain control over system and perform malicious acts.
  • Severity
  • Critical
  • Category
  • Account Privilege Management
  • Resolution
  • Follow the below steps in GPO to resolve the misconfiguration. Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Installer >> "Always install with elevated privileges" to "Disabled".
  • Reboot Required
  • No