First Run Customize settings must be enabled as home page.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-17296	DTBI010	SV-40701r1_rule	ECSC-1	Medium

Description
This policy setting prevents performance of the First Run Customize settings ability and provides central management controls of what web page will be provided to the user when they launch Internet Explorer for the first time after installation of Internet Explorer. If you enable this policy setting, you can configure one of two choices: 1) Skip Customize Settings, and go directly to the user’s home page, or 2) Skip Customize Settings, and go directly to the "Welcome to Internet Explorer" Web page. If you disable or do not configure this policy setting, users go through the regular first run process.

Description

This policy setting prevents performance of the First Run Customize settings ability and provides central management controls of what web page will be provided to the user when they launch Internet Explorer for the first time after installation of Internet Explorer. If you enable this policy setting, you can configure one of two choices: 1) Skip Customize Settings, and go directly to the user’s home page, or 2) Skip Customize Settings, and go directly to the "Welcome to Internet Explorer" Web page. If you disable or do not configure this policy setting, users go through the regular first run process.

STIG	Date
Microsoft Internet Explorer 9 Security Technical Implementation Guide	2015-12-17

Details

Check Text ( C-39428r2_chk )
The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> "Prevent performance of First Run Customize settings" must be “Enabled” and "Go directly to home page" selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main Criteria: If the value DisableFirstRunCustomize is REG_DWORD = 1, this is not a finding.

Check Text ( C-39428r2_chk )

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> "Prevent performance of First Run Customize settings" must be “Enabled” and "Go directly to home page" selected from the drop-down box.

Procedure: Use the Windows Registry Editor to navigate to the following key:
HKLM\Software\Policies\Microsoft\Internet Explorer\Main

Criteria: If the value DisableFirstRunCustomize is REG_DWORD = 1, this is not a finding.

Fix Text (F-34557r1_fix)
Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> "Prevent performance of First Run Customize settings" to “Enabled” and select "Go directly to home page" from the drop-down box.