Pre-Installed Keeper Password Manager on Windows 10 exposes systems to passwords stealing

Problem:

There's a good reason why security analysts get nervous about bundled third-party software: it can introduce vulnerabilities that the companies can't control.

Google researcher Tavis Ormandy discovered that a Windows 10 image came bundled with a third-party password manager, Keeper, which came with a glaring browser plugin flaw -- a malicious website could steal passwords.

Solution:

It is recommended to disable Content Delivery Manager (for PreInstalledApps enabled) using Desktop Central's Registry configuration:

1. Navigate to Desktop Central -> Configurations -> Add Configuration -> Windows

2. Select Registry Configuration for computers

3. Configure registry settings to disable the Content Delivery Manager:

[HKEY_LOCAL_MACHINE\DefaultUser\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager];

0 = No Disable;

1 = Yes Enable (Default);

"PreInstalledAppsEnabled"=dword:00000000

4. Select all the affected Win 10 running computers in your network.

5. Deploy the configuration.