Internet Explorer is configured to notify users when programs are modified through the software distribution channel.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-3433	DTBI137	SV-3433r1_rule	ECSC-1	Low

Description
Microsoft Internet Explorer now supports a software distribution channel that may be used to update software installed on a machine. If this setting is enabled, users will not be notified when programs are modified through the software distribution channel. This allows administrators to update workstations without user intervention.

STIG	Date
Microsoft IE Version 6	2014-12-17

Details

Check Text ( C-1771r1_chk )
If the following registry value exists and its value is not set to 1, then this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ Value Name: NoMSAppLogo5ChannelNotify Type: REG_DWORD Value: 1

Fix Text (F-5915r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer “Disable Software Update Shell Notifications on Program Launch” to “Enabled”.