System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)ID: oval:org.secpod.oval:def:8839 | Date: (C)2013-01-21 (M)2022-10-10 |
Class: COMPLIANCE | Family: windows |
The System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links) setting should be configured correctly.
This policy setting determines the strength of the default discretionary access control list (DACL) for objects. The setting helps secure objects that can be located and shared among processes and its default configuration strengthens the DACL, because it allows users who are not administrators to read shared objects but does not allow them to modify any that they did not create.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)
(2) KEY: HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\ProtectionMode
Platform: |
Microsoft Windows Server 2008 R2 |