Windows Operating System Hardening Measure (RestrictDriverInstallationToAdministrators)

info Nessus Plugin ID 158243

Synopsis

The remote Windows host is missing an operating system hardening measure.

Description

The remote system may be in a vulnerable state to exploitation by having the HKLM\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\RestrictDriverInstallationToAdministrators registry key set to 0.

Solution

Update the DWORD registry value RestrictDriverInstallationToAdministrators under: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint to 1

See Also

http://www.nessus.org/u?a4e8dad8

http://www.nessus.org/u?9896731b

Plugin Details

Severity: Info

ID: 158243

File Name: windows_RestrictDriverInstallationToAdministrators_reg_check.nasl

Version: 1.1

Type: local

Agent: windows

Family: Windows

Published: 2/22/2022

Updated: 2/22/2022

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/Registry/Enumerated