The system must be configured to prevent the display of error messages to the user.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-56557	WINER-000106	SV-70817r1_rule	ECSC-1	Medium

Description
Displaying error messages to users provides them the option of sending the reports. Error reports should be sent silently, unknown to the user. This setting controls whether users are shown an error dialog box that lets them report an error.

STIG	Date
Windows 2003 Domain Controller Security Technical Implementation Guide	2015-03-09

Details

Check Text ( C-57119r2_chk )
If the following registry values do not exist or are not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting\ Value Name: ShowUI Type: REG_DWORD Value: 0 Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting\DW\ Value Name: DWAllowHeadless Type: REG_DWORD Value: 1

Check Text ( C-57119r2_chk )

If the following registry values do not exist or are not configured as specified, this is a finding:

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting\

Value Name: ShowUI
Type: REG_DWORD
Value: 0

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting\DW\

Value Name: DWAllowHeadless
Type: REG_DWORD
Value: 1

Fix Text (F-61445r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> System -> Error Reporting -> "Display Error Notification" to "Disabled".