Updates to website lists from Microsoft must be disallowed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22147	DTBI750	SV-45449r1_rule	ECSC-1	Low

Description
This policy controls the website compatibility lists provided by Microsoft. If you enable this policy setting, the compatibility website lists provided by Microsoft will be used during browser navigation. If a user visits a site on the compatibility list provided by Microsoft, the page will automatically display in Compatibility view. If you disable this policy setting, the Microsoft website list will not be used. Additionally, users cannot enable the feature using the Compatibility View Settings dialog box. If you do not configure this setting, the Microsoft website list will not be active. The user can enable the functionality using the Compatibility View Settings dialog box.

Description

This policy controls the website compatibility lists provided by Microsoft. If you enable this policy setting, the compatibility website lists provided by Microsoft will be used during browser navigation. If a user visits a site on the compatibility list provided by Microsoft, the page will automatically display in Compatibility view. If you disable this policy setting, the Microsoft website list will not be used. Additionally, users cannot enable the feature using the Compatibility View Settings dialog box. If you do not configure this setting, the Microsoft website list will not be active. The user can enable the functionality using the Compatibility View Settings dialog box.

STIG	Date
Microsoft Internet Explorer 10 Security Technical Implementation Guide	2014-07-03

Details

Check Text ( C-42798r1_chk )
The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Compatibility View -> "Include updated Web site lists from Microsoft" must be "Disabled". Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation Criteria: If the value MSCompatibilityMode is REG_DWORD = 0, this is not a finding.

Check Text ( C-42798r1_chk )

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Compatibility View -> "Include updated Web site lists from Microsoft" must be "Disabled".

Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation

Criteria: If the value MSCompatibilityMode is REG_DWORD = 0, this is not a finding.

Fix Text (F-38846r1_fix)
Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Compatibility View -> "Include updated Web site lists from Microsoft" to "Disabled".