UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The system is configured to allow installation of printers using kernel-mode drivers.


Overview

Finding ID Version Rule ID IA Controls Severity
V-3478 3.087 SV-29715r1_rule DCSL-1 Medium
Description
Kernel-mode drivers are drivers that operate in kernel mode. Kernel mode allows virtually unlimited access to hardware and memory. A poorly written kernel driver may cause system instability and data corruption. Malicious code inserted in a kernel-mode driver has almost no limit on what it may do. Most modern printers do not require kernel-mode drivers.
STIG Date
Windows 2003 Domain Controller Security Technical Implementation Guide 2014-04-07

Details

Check Text ( None )
None
Fix Text (F-5698r1_fix)
Configure the system to prevent it from allowing the installation of kernel-mode drivers by setting the policy value for Computer Configuration -> Administrative Templates -> Printers “Disallow Installation of Printers Using Kernel-mode Drivers” to “Enabled”.