UCF STIG Viewer Logo

Prompt for download location must be enabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-221587 DTBC-0053 SV-221587r615937_rule Medium
Description
If the policy is enabled, the user will be asked where to save each file before downloading. If the policy is disabled, downloads will start immediately, and the user will not be asked where to save the file. If the policy is not configured, the user will be able to change this setting.
STIG Date
Google Chrome Current Windows Security Technical Implementation Guide 2022-09-09

Details

Check Text ( C-23302r415888_chk )
Universal method:
1. In the omnibox (address bar) type chrome:// policy
2. If "PromptForDownloadLocation" is not displayed under the "Policy Name" column or it is not set to "true" under the "Policy Value" column, then this is a finding.
Windows method:
1. Start regedit
2. Navigate to HKLM\Software\Policies\Google\Chrome\
3. If the "PromptForDownloadLocation" value name does not exist or its value data is not set to "1", this is a finding.
Fix Text (F-23291r415889_fix)
Windows group policy:
1. Open the group policy editor tool with gpedit.msc
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\
Policy Name: Ask where to save each file before downloading
Policy State: Enabled
Policy Value: N/A