Device metadata retrieval from the Internet must be prevented.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-21964	5.273	SV-32454r2_rule		Low

Description
Some features may communicate with the vendor, sending system information or downloading data or components for the feature. Turning off this capability will prevent potentially sensitive information from being sent outside the enterprise and uncontrolled updates to the system. This setting will prevent Windows from retrieving device metadata from the Internet.

STIG	Date
Windows Server 2008 R2 Domain Controller Security Technical Implementation Guide	2016-07-22

Details

Check Text ( None )
None

Fix Text (F-66941r1_fix)
Configure the policy value for Computer Configuration >> Administrative Templates >> System >> Device Installation >> "Prevent device metadata retrieval from the Internet" to "Enabled".