Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.
An XCCDF Rule
Description
The registry is integral to the function, security, and stability of the Windows system. Changing the system's registry permissions allows the possibility of unauthorized and anonymous modification to the operating system.
- ID
- SV-253431r958726_rule
- Version
- WN11-RG-000005
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Maintain the default permissions for the HKEY_LOCAL_MACHINE registry hive.
The default permissions of the higher level keys are noted below.
HKEY_LOCAL_MACHINE\SECURITY
Type - "Allow" for all