Information
This policy setting controls whether application write failures are redirected to defined registry and file system locations. This policy setting mitigates applications that run as administrator and write run-time application data to:
- %ProgramFiles%
- %windir%
- %windir%\System32
- HKLM\SOFTWARE
The recommended state for this setting is: Enabled
This setting reduces vulnerabilities by ensuring that legacy applications only write data to permitted locations.
Solution
To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled :
Local Policies Security Options\User Account Control: Virtualize file and registry write failures to per-user locations
Impact:
None - this is the default behavior.