Windows Installer: Must prevent users from changing installation options

938832a1-8ded-48d6-99b6-2b783cd2d3ae

Installation options for applications are typically controlled by administrators. This setting prevents users from changing installation options that may bypass security features.

Remediation

To fit this configure the policy value for
Computer Configuration
|_ Administrative Templates
|_ Windows Components
|_ Windows Installer
|_ Allow user control over installs to "Disabled".

STIG:
Server:
2022: https://www.stigviewer.com/stig/microsoft_windows_server_2022/2022-08-25/finding/V-254373
2019: https://www.stigviewer.com/stig/microsoft_windows_server_2019/2022-03-01/finding/V-205801 / https://www.stigviewer.com/stig/windows_server_2019/2020-06-15/finding/V-93199
2016: https://www.stigviewer.com/stig/microsoft_windows_server_2016/2022-03-01/finding/V-224953 / https://www.stigviewer.com/stig/windows_server_2016/2020-06-16/finding/V-73583

Desktop:
W11: https://www.stigviewer.com/stig/microsoft_windows_11/2022-06-24/finding/V-253410
W10: https://www.stigviewer.com/stig/microsoft_windows_10/2022-04-08/finding/V-220856 / https://www.stigviewer.com/stig/windows_10/2021-08-18/finding/V-220856

NIST 800-53: CM-11(2)
NIST 800-171 rev2: 3.4.9
NIST 800-171 rev3 IPD: 3.13.13.b
NIST 800-171A: 3.4.9[b], 3.4.9[c]
CAT:II
CCI: CCI-001812
Rule-ID:SV-254373r848935_rule
STIG-ID:WN22-CC-000420
Vuln-ID:V-254373