Automatic Updates must not be used (unless configured to point to a DoD server).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-14250	2.119	SV-25200r2_rule	DCSL-1	Medium

Description
Uncontrolled system updates can introduce issues to a system. The system must be configured to prevent Automatic Updates from being run unless directed to a DoD Windows Server Update Services (WSUS) server.

STIG	Date
Win7 Audit	2013-06-10

Details

Check Text ( None )
None

Fix Text (F-42650r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> "Configure Automatic Updates" to "Disabled". If the site is using a DoD WSUS server to distribute software updates, the policy setting to configure the WSUS URL is Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> "Specify intranet Microsoft update service location".

Fix Text (F-42650r1_fix)

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> "Configure Automatic Updates" to "Disabled".

If the site is using a DoD WSUS server to distribute software updates, the policy setting to configure the WSUS URL is Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> "Specify intranet Microsoft update service location".