Windows Installer: Disable "Always install with elevated privileges" option

a6d113ff-fd83-4631-84b3-f58e266b4976

Standard user accounts must not be granted elevated privileges. Enabling Windows Installer to elevate privileges when installing applications can allow malicious persons and applications to gain full control of a system.

Remediation

To fix this configure the policy value for:
Computer Configuration
|_ Administrative Templates
|_ Windows Components
|_ Windows Installer
|_ Always install with elevated privileges to "Disabled".

STIG Server: 2016 - https://www.stigviewer.com/stig/windows_server_2016/2019-01-16/finding/V-73585
2019 - https://www.stigviewer.com/stig/windows_server_2019/2020-06-15/finding/V-93201
STIG Desktop: https://www.stigviewer.com/stig/windows_10/2016-06-24/finding/V-63325