CCI|CCI-001812

Title

The information system prohibits user installation of software without explicit privileged status.

Reference Item Details

Category: 2013

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.4.4 Ensure boot loader does not allow removable mediaUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.6.1.10 Ensure system device files are labeled - device_tUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.6.1.10 Ensure system device files are labeled - unlabeled_tUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
2.2.21 Ensure the TFTP server has not been installed - TFTP server package installed if not required for operational support.UnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
3.029 - Print driver installation privilege is not restricted to administrators.WindowsDISA Windows Server 2008 MS STIG v6r46
3.029 - Print driver installation privilege is not restricted to administrators.WindowsDISA Windows Vista STIG v6r41
3.029 - Print driver installation privilege is not restricted to administrators.WindowsDISA Windows Server 2008 DC STIG v6r47
3.029 - Print driver installation privilege must be restricted to administrators.WindowsDISA Windows 7 STIG v1r32
3.029 - The print driver installation privilege will be restricted to administrators.WindowsDISA Windows Server 2008 R2 DC STIG v1r34
3.029 - The print driver installation privilege will be restricted to administrators.WindowsDISA Windows Server 2008 R2 MS STIG v1r33
4.2.1.6 Ensure remote rsyslog messages are only accepted on designated log hosts.UnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.060 - Media Player must be configured to prevent automatic checking for updates.WindowsDISA Windows Server 2008 DC STIG v6r47
5.060 - Media Player must be configured to prevent automatic checking for updates.WindowsDISA Windows Server 2008 R2 DC STIG v1r34
5.060 - Media Player must be configured to prevent automatic checking for updates.WindowsDISA Windows 7 STIG v1r32
5.060 - Media Player must be configured to prevent automatic checking for updates.WindowsDISA Windows Vista STIG v6r41
5.060 - Media Player must be configured to prevent automatic checking for updates.WindowsDISA Windows Server 2008 R2 MS STIG v1r33
5.060 - Media Player must be configured to prevent automatic checking for updates.WindowsDISA Windows Server 2008 MS STIG v6r46
5.061 - Media Player is configured to allow automatic CODEC downloads.WindowsDISA Windows Server 2008 DC STIG v6r47
5.061 - Media Player is configured to allow automatic CODEC downloads.WindowsDISA Windows Server 2008 MS STIG v6r46
5.061 - Media Player will be configured to prevent automatic Codec downloads.WindowsDISA Windows Server 2008 R2 MS STIG v1r33
5.061 - Media Player will be configured to prevent automatic Codec downloads.WindowsDISA Windows Server 2008 R2 DC STIG v1r34
5.128 - Search Companion prevented from automatically downloading content updates.WindowsDISA Windows Vista STIG v6r41
5.128 - Search Companion prevented from automatically downloading content updates.WindowsDISA Windows Server 2008 MS STIG v6r46
5.128 - Search Companion prevented from automatically downloading content updates.WindowsDISA Windows Server 2008 DC STIG v6r47
5.131 - Windows is prevented from using Windows Update to search for drivers.WindowsDISA Windows 7 STIG v1r32
5.131 - Windows is prevented from using Windows Update to search for drivers.WindowsDISA Windows Server 2008 DC STIG v6r47
5.131 - Windows is prevented from using Windows Update to search for drivers.WindowsDISA Windows Vista STIG v6r41
5.131 - Windows is prevented from using Windows Update to search for drivers.WindowsDISA Windows Server 2008 MS STIG v6r46
5.131 - Windows will be prevented from using Windows Update to search for drivers.WindowsDISA Windows Server 2008 R2 DC STIG v1r34
5.131 - Windows will be prevented from using Windows Update to search for drivers.WindowsDISA Windows Server 2008 R2 MS STIG v1r33
5.211 - Driver Install - Device Driver Search PromptWindowsDISA Windows Vista STIG v6r41
5.211 - Driver Install - Device Driver Search PromptWindowsDISA Windows Server 2008 MS STIG v6r46
5.211 - Driver Install - Device Driver Search PromptWindowsDISA Windows Server 2008 DC STIG v6r47
5.211 - Users will not be prompted to search Windows Update for device drivers.WindowsDISA Windows Server 2008 R2 DC STIG v1r34
5.211 - Users will not be prompted to search Windows Update for device drivers.WindowsDISA Windows Server 2008 R2 MS STIG v1r33
5.211 - Users will not be prompted to search Windows Update for device drivers.WindowsDISA Windows 7 STIG v1r32
5.242 - Prevent users from changing Windows installer options.WindowsDISA Windows 7 STIG v1r32
5.242 - Users will be prevented from changing installation options.WindowsDISA Windows Server 2008 R2 DC STIG v1r34
5.242 - Users will be prevented from changing installation options.WindowsDISA Windows Server 2008 R2 MS STIG v1r33
5.242 - Windows Installer - User ControlWindowsDISA Windows Server 2008 DC STIG v6r47
5.242 - Windows Installer - User ControlWindowsDISA Windows Server 2008 MS STIG v6r46
5.242 - Windows Installer - User ControlWindowsDISA Windows Vista STIG v6r41
5.243 - Non-administrators will be prevented from applying vendor signed updates.WindowsDISA Windows Server 2008 R2 DC STIG v1r34
5.243 - Non-administrators will be prevented from applying vendor signed updates.WindowsDISA Windows Server 2008 R2 MS STIG v1r33
5.243 - Prevent users from installing vendor signed updates.WindowsDISA Windows 7 STIG v1r32
5.243 - Windows Installer - Vendor Signed UpdatesWindowsDISA Windows Server 2008 MS STIG v6r46
5.243 - Windows Installer - Vendor Signed UpdatesWindowsDISA Windows Server 2008 DC STIG v6r47
5.243 - Windows Installer - Vendor Signed UpdatesWindowsDISA Windows Vista STIG v6r41
5.250 - Unsigned gadgets must not be installed.WindowsDISA Windows 7 STIG v1r32
5.250 - Unsigned gadgets must not be installed. - TurnOffUnsignedGadgetsWindowsDISA Windows Vista STIG v6r41