18.7.2 (L1) Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'

Information

This policy setting determines whether Redirection Guard is enabled for the print spooler. Redirection Guard can prevent file redirections from being used within the print spooler.

The recommended state for this setting is: Enabled: Redirection Guard Enabled

This setting prevents non-administrators from redirecting files within the print spooler process.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled: Redirection Guard Enabled :

Computer Configuration\Policies\Administrative Templates\Printers\Configure Redirection Guard

Note: This Group Policy path is provided by the Group Policy template Printing.admx/adml that is included with the Microsoft Windows 11 Release 22H2 Administrative Templates v1.0 (or newer).

Impact:

None - this is default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/17971

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-16

Plugin: Windows

Control ID: 8d12e8b450de7f8b7bdce7855187a69f825ae34e61b3c02f953f8f1487b8a5f3