Allow administrators to override Device Installation Restriction policiesID: oval:org.secpod.oval:def:28252 | Date: (C)2015-10-08 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
This policy setting allows you to determine whether members of the Administrators group can install and update the drivers for any device, regardless of other policy settings.
If you enable this policy setting, members of the Administrators group can use the Add Hardware wizard or the Update Driver wizard to install and update the drivers for any device. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.
If you disable or do not configure this policy setting, members of the Administrators group are subject to all policy settings that restrict device installation.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\System\Device Installation\Device Installation Restrictions!Allow administrators to override Device Installation Restriction policies
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowAdminInstall
Platform: |
Microsoft Windows Server 2012 R2 |