Microsoft Windows: Do not allow drive redirection

This policy setting specifies whether to prevent the mapping of client drives in a Remote Desktop Services session drive redirection. By default, an RD Session Host server maps client drives automatically upon connection. Mapped drives appear in the session folder tree in File Explorer or Compute...

Microsoft Windows: Prevent the computer from joining a homegroup

This policy setting specifies whether users can add computers to a homegroup. By default, users can add their computer to a homegroup on a private network. If you enable this policy setting, users cannot add computers to a homegroup. This policy setting does not affect other network sharing...

Microsoft Windows 10: Localhost IP address for WebRTC (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgelocalhostipwebrtc.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Prevent using Localhost IP address for WebRTC Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.ne...

Microsoft Windows 10: Allow Extensions (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgeextensions.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow Extensions Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Microsoft Windows: Client connection encryption level (Remote Desktop Services)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrdhostclientencrlevel.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Set client connection encryption level Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows 10: Allow Adobe Flash (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgeadobeflash.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow Adobe Flash Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

Microsoft Windows: COM port redirection (Remote Desktop Services)

This policy setting specifies whether to prevent the redirection of data to client COM ports from the remote computer in a Remote Desktop Services session. You can use this setting to prevent users from redirecting data to COM port peripherals or mapping local COM ports while they are logged on t...

Microsoft Windows 10: Windows Defender SmartScreen prompts for files (Edge)

This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. If you enable this setting, employees can SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

Microsoft Windows: LPT port redirection (Remote Desktop Services)

This policy setting specifies whether to prevent the redirection of data to client LPT ports during a Remote Desktop Services session. You can use this setting to prevent users from mapping local LPT ports and redirecting data from the remote computer to local LPT port peripherals. By default,...

Microsoft Windows: Allow indexing of encrypted files

This policy setting allows encrypted items to be indexed. If you enable this policy setting, indexing will attempt to decrypt and index the content access restrictions will still apply. If you disable this policy setting, the search service components including non-Microsoft components are expect...

CVE-2018-0598

Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Microsoft Windows: Event Log behavior when log file reaches its max size (App)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winappretention.nasl 10989 2018-08-15 14:57:51Z emoss $ Check value for Control Event Log behavior when the log file reaches its maximum size Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Enumerate administrator accounts on elevation

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winenumadminelevation.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Enumerate administrator accounts on elevation Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Microsoft Windows: Require additional authentication at startup (TPM startup key)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winaddauthtpmstartupkey.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Require additional authentication at startup: Configure TPM startup key Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...

Microsoft Windows 10: Allow Use of Camera

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincamerause.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Allow Use of Camera Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you c...

Microsoft Windows: Allow enhanced PINs for startup

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winenhancedpinsstartup.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Allow enhanced PINs for startup Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...

CVE-2018-0598

The CVE-2018-0598 issue concerns self-extracting archive files created by IExpress bundled with Microsoft Windows. Affected component is the IExpress self-extracting archive mechanism, where an untrusted search path can lead to DLL planting and privilege escalation by loading a Trojan horse DLL f...

Microsoft Windows 10: Disable new DMA devices when this computer is locked

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windmadeviceslocked.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Disable new DMA devices when this computer is locked Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: BitLocker-protected removable drives recovery (wizard)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmbitlockerrecoverywizard.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard Authors: Emanuel Mos...