Disable 'Always install with elevated privileges'

Check whether Windows Installer always elevates privileges when installing applications.

Table of Contents

Potential risk

Standard user accounts must not be granted elevated privileges. Enabling Windows Installer to elevate privileges when installing applications can allow malicious persons and applications to gain full control of a system.

Remediation options

Option 1 - Set the following registry value:
HKLM\SOFTWARE\Policies\Microsoft\Windows\Installer\AlwaysInstallElevated

To the following REG_DWORD value: 0

Option 2 - Set the following Group Policy:
Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Installer\Always install with elevated privileges

To the following value: Disabled