The system must be configured to collect additional information about the system when error reports are generated.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-56547	WINER-000102	SV-70807r1_rule	ECSC-1	Medium

Description
Windows Error Reporting information can be used to help diagnose day-to-day software issues, as well as help discover malicious code and possibly zero-day attacks on systems. This setting controls whether to collect and include additional data related to the system's configuration in the error report. This is useful for obtaining contextual information relative to the process that caused the error.

Description

Windows Error Reporting information can be used to help diagnose day-to-day software issues, as well as help discover malicious code and possibly zero-day attacks on systems. This setting controls whether to collect and include additional data related to the system's configuration in the error report. This is useful for obtaining contextual information relative to the process that caused the error.

STIG	Date
Windows 2003 Domain Controller Security Technical Implementation Guide	2015-06-23

Details

Check Text ( None )
None

Fix Text (F-61435r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> System -> Error Reporting -> "Configure Error Reporting" to "Enabled" with "Do not collect additional machine data" unchecked.