UCF STIG Viewer Logo

Any default Windows 8 style apps must be maintained and updated at current releases.


Overview

Finding ID Version Rule ID IA Controls Severity
WN08-GE-000031 WN08-GE-000031 WN08-GE-000031_rule Medium
Description
Applications must be updated as flaws are identified and remediations are made available. The default method is through the Windows Store, which is required to be blocked. Therefore, another method, such as an enterprise marketplace must be used or the apps removed from the system.
STIG Date
Windows 8 Security Technical Implementation Guide 2012-11-21

Details

Check Text ( C-WN08-GE-000031_chk )
If any of the default Windows 8 apps are installed, verify the site has a process to maintain them at the current release. If default apps are not maintained at the current release, this is a finding.

View provisioned app packages with the command "dism /online /Get-ProvisionedAppxPackages".

Default Windows 8 Apps:
Communications - microsoft.windowscommunicationapps (provides Mail, People, Messaging and Calendar)
Photos - microsoft.windowsphotos
Finance - Microsoft.BingFinance
Weather - Microsoft.BingWeather
Maps - Microsoft.BingMaps
Sports - Microsoft.BingSports
News - Microsoft.BingNews
Bing - Microsoft.Bing
Travel - Microsoft.BingTravel
Camera - Microsoft.Camera
Fix Text (F-WN08-GE-000031_fix)
Establish a process to maintain any default Windows 8 apps that are installed at the current release.

Remove any default Windows 8 apps the site has not approved for use.
Enter "dism /online /Get-ProvisionedAppxPackages".
Make note of the PackageName (e.g., Microsoft.ZuneMusic_1.0.927.0_x64__8wekyb3d8bbwe)
Enter the following to remove the app package from the system: "dism /online /Remove-ProvisionedAppxPackage /PackageName:packagename" substituting "packagename" noted from the previous step.
Uninstall the application from any user profiles provisioned prior to this.