The Windows Installer Always install with elevated privileges must be disabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-34974	WINCC-000001	SV-46216r1_rule	ECLP-1	High

Description
Standard user accounts must not be granted elevated privileges. Enabling Windows Installer to elevate privileges when installing applications can allow malicious persons and applications to gain full control of a system.

STIG	Date
Windows 2003 Member Server Security Technical Implementation Guide	2015-06-24

Details

Check Text ( None )
None

Fix Text (F-39542r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Installer -> "Always install with elevated privileges" to "Disabled".