Internet Explorer - Do not allow users to enable or disable add-ons.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-14245 | DTBI697 | SV-14856r1_rule | ECSC-1 | Low |
| Description |
|---|
| This check verifies that the system is configured to allow users to enable or disable add-ons through Add-On Manager in Internet Explorer. |
| STIG | Date |
|---|---|
| Microsoft IE Version 7 | 2015-12-17 |
Details
| Check Text ( C-11590r1_chk ) |
|---|
| The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer “Do Not Allow Users to enable or Disable Add-Ons” will be set to “Disabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions Criteria: If the value NoExtensionManagement “does not” exist or the value is set to REG_DWORD = 0, this is not a finding. If the value NoExtensionManagement “does” exist and is set to REG_DWORD = 1 (decimal), this is a finding. |
| Fix Text (F-13570r1_fix) |
|---|
| The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer “Do Not Allow Users to enable or Disable Add-Ons” will be set to “Disabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions Criteria: Remove the value NoExtensionManagement or set to REG_DWORD = 0 (decimal). |