Windows Installer: Disable "Always install with elevated privileges" option


Standard user accounts must not be granted elevated privileges. Enabling Windows Installer to elevate privileges when installing applications can allow malicious persons and applications to gain full control of a system.


To fix this configure the policy value for:
Computer Configuration
|_ Administrative Templates
|_ Windows Components
|_ Windows Installer
|_ Always install with elevated privileges to "Disabled".

STIG Server: 2016 -
2019 -
STIG Desktop: