CCE-93617-9Platform: cpe:/o:microsoft:windows_server_2019 | Date: (C)2020-09-22 (M)2023-07-04 |
Turn off background refresh of Group Policy
Prevents Group Policy from being updated while the computer is in use. This setting applies to Group Policy for computers, users, and domain controllers.
If you enable this setting, the system waits until the current user logs off the system before updating the computer and user settings.
If you disable this setting, updates can be applied while users are working. The frequency of updates is determined by the 'Group Policy refresh interval for computers' and 'Group Policy refresh interval for users' settings.
Note: If you make changes to this setting, you must restart your computer for it to take effect.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesSystemGroup Policy!Turn off background refresh of Group Policy
(2) REG: HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem!DisableBkGndGroupPolicy
CCSS Severity: | CCSS Metrics: |
CCSS Score : 3.3 | Attack Vector: LOCAL |
Exploit Score: 1.8 | Attack Complexity: LOW |
Impact Score: 1.4 | Privileges Required: LOW |
Severity: LOW | User Interaction: NONE |
Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L | Scope: UNCHANGED |
| Confidentiality: NONE |
| Integrity: NONE |
| Availability: LOW |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:56634 |