CCE-38522-9Platform: cpe:/o:microsoft:windows_server_2012::r2 | Date: (C)2023-07-04 (M)2023-07-04 |
Determines when registry policies are updated.
This setting affects all policies in the Administrative Templates folder and any other policies that store values in the registry.
It overrides customized settings that the program implementing a registry policy set when it was installed.
If you enable this setting, you can use the check boxes provided to change the options.
If you disable this setting or do not configure it, it has no effect on the system.
The "Do not apply during periodic background processing" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart.
Fix:
(1) GPO: Computer ConfigurationAdministrative TemplatesSystemGroup PolicyRegistry policy processingDo not apply during periodic background processing
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsGroup Policy{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\System\Group Policy\Registry policy processing\Do not apply during periodic background processing
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}\!NoBackgroundPolicy
CCSS Severity: | CCSS Metrics: |
CCSS Score : 5.6 | Attack Vector: NETWORK |
Exploit Score: 2.2 | Attack Complexity: HIGH |
Impact Score: 3.4 | Privileges Required: NONE |
Severity: MEDIUM | User Interaction: NONE |
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L | Scope: UNCHANGED |
| Confidentiality: LOW |
| Integrity: LOW |
| Availability: LOW |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:81493 |