a6d113ff-fd83-4631-84b3-f58e266b4976
Standard user accounts must not be granted elevated privileges. Enabling Windows Installer to elevate privileges when installing applications can allow malicious persons and applications to gain full control of a system.
To fix this configure the policy value for:
Computer Configuration
|_ Administrative Templates
|_ Windows Components
|_ Windows Installer
|_ Always install with elevated privileges to "Disabled".
STIG: Server
2022: https://www.stigviewer.com/stig/microsoft_windows_server_2022/2023-09-11/finding/V-254374
2019: https://www.stigviewer.com/stig/microsoft_windows_server_2019/2023-09-11/finding/V-205802 / https://www.stigviewer.com/stig/windows_server_2019/2020-06-15/finding/V-93201
2016: https://www.stigviewer.com/stig/microsoft_windows_server_2016/2023-08-22/finding/V-224954 / https://www.stigviewer.com/stig/windows_server_2016/2020-06-16/finding/V-73585
Desktop:
W11: https://www.stigviewer.com/stig/microsoft_windows_11/2023-09-29/finding/V-253411
W10: https://www.stigviewer.com/stig/microsoft_windows_10/2023-09-29/finding/V-220857 / https://www.stigviewer.com/stig/windows_10/2021-08-18/finding/V-220857
NIST 800-53: AC-6(10)
NIST 800-171 Rev2: 3.1.7
NIST 800-171 Rev3 FPD: 3.1.7.b
NIST 800-171A: 3.1.7[a], 3.1.7[b], 3.1.7[c], 3.1.7[d]
NIST 800-171 Rev3 IPD: A.03.01.07.a
CSCv6: 5.1
CMMC v2/v2.1: AC.L2-3.1.7