Booting into alternate operating systems is permitted.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1119	5.003	SV-25256r1_rule		Medium

Description
Allowing other operating systems to run on a secure system, can allow users to circumvent security. If more than one operating system is installed on a computer, each must be configured to be compliant with STIG guidance.

STIG	Date
Windows 7 Security Technical Implementation Guide	2016-12-19

Details

Check Text ( C-26829r1_chk )
Verify that the local system boots directly into Windows: Open Control Panel. Select “System”. Select the “Advanced System Settings” link. Select the “Advanced” tab. Click the Startup and Recovery “Settings” button. If the drop-down list box “Default operating system:” shows any operating system other than Windows 7, this may be a finding. Verify that Windows XP Mode, a Windows Virtual PC instance of Windows XP, has not been installed on the system: Open Control Panel. Select “Programs and Features”. If Windows Virtual PC or Windows XP Mode are listed this may be a finding. If all additional operating systems are STIG compliant, then this is not a finding.

Check Text ( C-26829r1_chk )

Verify that the local system boots directly into Windows:

Open Control Panel.
Select “System”.
Select the “Advanced System Settings” link.
Select the “Advanced” tab.
Click the Startup and Recovery “Settings” button.

If the drop-down list box “Default operating system:” shows any operating system other than Windows 7, this may be a finding.

Verify that Windows XP Mode, a Windows Virtual PC instance of Windows XP, has not been installed on the system:

Open Control Panel.
Select “Programs and Features”.
If Windows Virtual PC or Windows XP Mode are listed this may be a finding.

If all additional operating systems are STIG compliant, then this is not a finding.

Fix Text (F-5811r1_fix)
Configure the system to prevent running non-compliant alternate operating systems.