Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-3433 | DTBI137 | SV-3433r1_rule | ECSC-1 | Low |
Description |
---|
Microsoft Internet Explorer now supports a software distribution channel that may be used to update software installed on a machine. If this setting is enabled, users will not be notified when programs are modified through the software distribution channel. This allows administrators to update workstations without user intervention. |
STIG | Date |
---|---|
Microsoft IE Version 6 | 2014-07-03 |
Check Text ( C-1771r1_chk ) |
---|
If the following registry value exists and its value is not set to 1, then this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ Value Name: NoMSAppLogo5ChannelNotify Type: REG_DWORD Value: 1 |
Fix Text (F-5915r1_fix) |
---|
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer “Disable Software Update Shell Notifications on Program Launch” to “Enabled”. |