[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

247085

 
 

909

 
 

194218

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Windows Installer: Prohibit rollback

ID: oval:org.secpod.oval:def:18856Date: (C)2014-05-29   (M)2023-07-14
Class: COMPLIANCEFamily: windows




The Prohibit rollback machine setting should be configured correctly. Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation. This setting prevents Windows Installer from recording the original state of the system and sequence of changes it makes during installation. It also prevents Windows Installer from retaining files it intends to delete later. As a result, Windows Installer cannot restore the computer to its original state if the installation does not complete. This setting is designed to reduce the amount of temporary disk space required to install programs. Also, it prevents malicious users from interrupting an installation to gather data about the internal state of the computer or to search secure system files. However, because an incomplete installation can render the system or a program inoperable, do not use this setting unless it is essential. Fix: (1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Installer\Prohibit rollback (2) KEY: HKLM\Software\Policies\Microsoft\Windows\Installer\DisableRollback

Platform:
Microsoft Windows Server 2008 R2
Reference:
CCE-10670-8
CPE    1
cpe:/o:microsoft:windows_server_2008:r2
CCE    1
CCE-10670-8
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_Server_2008_R2

© SecPod Technologies