question

Sergiot1-4847 avatar image
0 Votes"
Sergiot1-4847 asked LimitlessTechnology-2700 answered

Windows 10 - CIS Benchmark Policy


Hello guys, hope that you were ok.

I have a question related to CIS Benchmarks that apply to Workstations:

According to the latest document issued (https://workbench.cisecurity.org/sections/875515/recommendations/1438111) - Chapter 2.3.4.2 (L2) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled' (Automated)

Is recommended the following instruction related to GPO to improve the security:

Remediation:

To establish the recommended configuration via GP, set the following UI path to Enabled: Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Devices: Prevent users from installing printer drivers

Are you aware or do you have information about if this remediation could get problems on a production environment? Or it can be applied with no worries?

Thanks in advance.

Best regards.

windows-10-securitywindows-group-policy
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered

Hi there,

For a computer to print to a shared printer, the driver for that shared printer must be installed on the local computer. This security setting determines who is allowed to install a printer driver as part of connecting to a shared printer. If this setting is enabled, only Administrators can install a printer driver as part of connecting to a shared printer. If this setting is disabled, any user can install a printer driver as part of connecting to a shared printer.

As far as in Production environment their no such reports from users stating the issues caused by this .

Hope this Answers all your queries , if not please do repost back .
If an Answer is helpful, please click "Accept Answer" and upvote it : )

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.