The system is configured to allow installation of printers using kernel-mode drivers.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-3478	3.087	SV-29715r1_rule	DCSL-1	Medium

Description
Kernel-mode drivers are drivers that operate in kernel mode. Kernel mode allows virtually unlimited access to hardware and memory. A poorly written kernel driver may cause system instability and data corruption. Malicious code inserted in a kernel-mode driver has almost no limit on what it may do. Most modern printers do not require kernel-mode drivers.

STIG	Date
Win2k3 Audit	2013-06-10

Details

Check Text ( None )
None

Fix Text (F-5698r1_fix)
Configure the system to prevent it from allowing the installation of kernel-mode drivers by setting the policy value for Computer Configuration -> Administrative Templates -> Printers “Disallow Installation of Printers Using Kernel-mode Drivers” to “Enabled”.