The IE home page is set to blank or a trusted site.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6228	DTBI001	SV-72161r3_rule		Medium

Description
By setting this parameter appropriately, a malicious web site will not be automatically loaded into a browser which may contain mobile code.

STIG	Date
Microsoft Internet Explorer 10 Security Technical Implementation Guide	2016-06-24

Details

Check Text ( C-170r5_chk )
The policy for User Configuration >> Policies >> Administrative Templates >> Windows Components >> Internet Explorer "Disable changing home page settings" must be "Enable" and specify a URL for the home page. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Microsoft\Internet Explorer\Main Criteria: If the value "Start Page" is about:blank or a trusted site, this is not a finding.

Check Text ( C-170r5_chk )

The policy for User Configuration >> Policies >> Administrative Templates >> Windows Components >> Internet Explorer "Disable changing home page settings" must be "Enable" and specify a URL for the home page.

Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Microsoft\Internet Explorer\Main

Criteria: If the value "Start Page" is about:blank or a trusted site, this is not a finding.

Fix Text (F-131r4_fix)
Set the policy for User Configuration >> Policies >> Administrative Templates >> Windows Components >> Internet Explorer "Disable changing home page settings" to "Enable" and specify the URL for the home page.