The URL to be displayed for checking updates to Internet Explorer and Internet Tools must be blank or empty.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-46803	DTBI675-IE11	SV-59669r1_rule	ECSC-1	Medium

Description
This policy setting allows checking for updates for Internet Explorer from the specified URL, included by default in Internet Explorer. If you enable this policy setting, users will not be able to change the URL to be displayed for checking updates to Internet Explorer and Internet Tools. The URL must be specified to be displayed for checking updates to Internet Explorer and Internet Tools. If you disable or do not configure this policy setting, the users will be able to change the URL to be displayed for checking updates to Internet Explorer and Internet Tools.

Description

This policy setting allows checking for updates for Internet Explorer from the specified URL, included by default in Internet Explorer. If you enable this policy setting, users will not be able to change the URL to be displayed for checking updates to Internet Explorer and Internet Tools. The URL must be specified to be displayed for checking updates to Internet Explorer and Internet Tools. If you disable or do not configure this policy setting, the users will be able to change the URL to be displayed for checking updates to Internet Explorer and Internet Tools.

STIG	Date
Microsoft Internet Explorer 11 Security Technical Implementation Guide	2015-03-26

Details

Check Text ( C-49895r2_chk )
The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Settings -> Component Updates -> Periodic check for updates to Internet Explorer and Internet Tools -> 'Prevent changing the URL for checking updates to Internet Explorer and Internet Tools' must be 'Enabled' with a 'blank or empty' selection box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main Criteria: The "Update_Check_Page" value must exist. The value must contain no data value. If the value "Update_Check_Page" is not present, this is a finding.

Check Text ( C-49895r2_chk )

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Settings -> Component Updates -> Periodic check for updates to Internet Explorer and Internet Tools -> 'Prevent changing the URL for checking updates to Internet Explorer and Internet Tools' must be 'Enabled' with a 'blank or empty' selection box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main Criteria: The "Update_Check_Page" value must exist. The value must contain no data value. If the value "Update_Check_Page" is not present, this is a finding.

Fix Text (F-50553r1_fix)
Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Settings -> Component Updates -> Periodic check for updates to Internet Explorer and Internet Tools -> 'Prevent changing the URL for checking updates to Internet Explorer and Internet Tools' to 'Enabled' with a 'blank or empty' selection box.