Internet Explorer is configured to allow Automatic Install of components.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-3431 | DTBI316 | SV-3431r1_rule | DCSL-1 | Medium |
| Description |
|---|
| This setting controls the ability of Internet Explorer to automatically install components if it goes to a site that requires components that are not currently installed. The System Administrator should install all components on the system. If additional components are necessary, the user should inform the SA and have the SA install the components. |
| STIG | Date |
|---|---|
| Microsoft IE Version 6 | 2014-12-17 |
Details
| Check Text ( C-1753r1_chk ) |
|---|
| If the following registry value doesn’t exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Policies\Microsoft\Internet Explorer\InfoDelivery\Restrictions\ Value Name: NoJITSetup Type: REG_DWORD Value: 1 |
| Fix Text (F-5913r1_fix) |
|---|
| Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer “Disable Automatic Install of Internet Explorer components” to “Enabled”. |