Windows Always Installed Elevated Status

info Nessus Plugin ID 162174

Language:

Synopsis

Windows AlwaysInstallElevated policy status was found on the remote Windows host

Description

Windows AlwaysInstallElevated policy status was found on the remote Windows host.
You can use the AlwaysInstallElevated policy to install a Windows Installer package with elevated (system) privileges This option is equivalent to granting full administrative rights, which can pose a massive security risk. Microsoft strongly discourages the use of this setting.

Solution

If enabled, disable AlwaysInstallElevated policy per your corporate security guidelines.

Plugin Details

Severity: Info

ID: 162174

File Name: windows_always_installed_elevated_status.nasl

Version: 1.1

Type: local

Agent: windows

Family: Windows

Published: 6/14/2022

Updated: 6/14/2022

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/Registry/Enumerated

Detections

Analytics