AddSystemHard.Policies.AddSystemHard• Machine

Prevent standard users from installing root certificates

This policy prevents standard (non-administrator) users from installing root certificate authorities to their user-specific trust store. Enabling this policy can help prevent code signing certificate cloning attacks. It is recommended to enable this policy.

Policy Details

Policy Name: ProtectedRoots
Registry Key: SOFTWARE\Policies\Microsoft\SystemCertificates\Root\ProtectedRoots
Value Name: Flags
Supported On: At least Windows Server 2016, Windows 10
Policy State Values: Enabled: 1

Disabled: 0
Available Languages: en-us fr-fr