Windows Installer: Must prevent users from changing installation options

938832a1-8ded-48d6-99b6-2b783cd2d3ae

Installation options for applications are typically controlled by administrators. This setting prevents users from changing installation options that may bypass security features.

Remediation

To fit this, configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Installer >> "Allow user control over installs" to "Disabled".

STIG: Server: https://www.stigviewer.com/stig/windows_server_2019/2020-06-15/finding/V-93199
Desktop: https://www.stigviewer.com/stig/windows_10/2021-08-18/finding/V-220856