'Disable binding directly to IPropertySetStorage without intermediate layers.' for User ConfigurationID: oval:org.secpod.oval:def:28794 | Date: (C)2015-10-14 (M)2021-06-02 |
Class: COMPLIANCE | Family: windows |
Changes the behavior of IShellFolder::BindToObject for IID_IPropertySetStorage to not bind directly to the IPropertySetStorage implementation, and to include the intermediate layers provided by the Property System. This behavior is consistent with Windows Vista's behavior in this scenario.
This disables access to user-defined properties, and properties stored in NTFS secondary streams.
Fix:
(1) GPO: User Configuration\Administrative Templates\Windows Components\File Explorer!Disable binding directly to IPropertySetStorage without intermediate layers.
(2) REG: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableBindDirectlyToPropertySetStorage
Platform: |
Microsoft Windows 8.1 |