Hello guys, hope that you were ok.
I have a question related to CIS Benchmarks that apply to Workstations:
According to the latest document issued (https://workbench.cisecurity.org/sections/875515/recommendations/1438111) - Chapter 2.3.4.2 (L2) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled' (Automated)
Is recommended the following instruction related to GPO to improve the security:
Remediation:
To establish the recommended configuration via GP, set the following UI path to Enabled: Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Devices: Prevent users from installing printer drivers
Are you aware or do you have information about if this remediation could get problems on a production environment? Or it can be applied with no worries?
Thanks in advance.
Best regards.