Internet Explorer is configured to allow users to change policies.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-3428	DTBI319	SV-25181r1_rule	ECSC-1	Medium

Description
This setting prevents users from changing the Internet Explorer policies on the machine. Policy changes should be made by administrators only, so this setting should be enabled.

STIG	Date
Internet Explorer 8 STIG	2014-01-08

Details

Check Text ( None )
None

Fix Text (F-26929r1_fix)
The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer “Security Zones: Do not allow users to change policies” will be set to “Enabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: Set the value Security_options_edit to REG_DWORD = 1.

Fix Text (F-26929r1_fix)

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer “Security Zones: Do not allow users to change policies” will be set to “Enabled”. Procedure: Use the Windows Registry Editor to navigate to the following key:
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: Set the value Security_options_edit to REG_DWORD = 1.