The system must not use removable media as the boot loader.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36664	WIN00-000012	SV-54986r2_rule		High

Description
Malicious users with removable boot media can gain access to a system configured to use removable media as the boot loader.

STIG	Date
Windows 7 Security Technical Implementation Guide	2016-06-08

Details

Check Text ( C-69243r1_chk )
Verify whether the system BIOS or controller allows removable media for the boot loader. If it does, this is a finding. If access is restricted by way of hypervisor configuration settings on virtual systems, this would not be a finding.

Fix Text (F-47868r2_fix)
Configure the system BIOS or controller to use a boot loader installed on fixed media.