Back

Configure the "Turn Off First-Run Opt-In" setting in limited functionality environments properly.


CONTROL ID
02261
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Configure Internet Browser security options according to organizational standards., CC ID: 02166

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • The "Turn Off First- Run Opt-In" setting should be configured correctly for the Internet Zone. Technical Mechanisms: Local Internet Options: GPO Settings:[Computer Configuration | User Configuration]/Network/Internet Explorer/Internet Control Panel/Security Page/Internet Zone Registry Keys:[HKLM … (CCE-3378-7, Common Configuration Enumeration List, Combined XML: Internet Explorer 7, 5.20130214)
  • The "Turn Off First- Run Opt-In" setting should be configured correctly for the Restricted Sites Zone. Technical Mechanisms: Local Internet Options: GPO Settings:[Computer Configuration | User Configuration]/Network/Internet Explorer/Internet Control Panel/Security Page/Restricted Sites Zone Regi… (CCE-4153-3, Common Configuration Enumeration List, Combined XML: Internet Explorer 7, 5.20130214)
  • The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Internet Zone. Technical Mechanisms: (1) GPO Settings: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn Off First-Run Op… (CCE-10434-9, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Restricted Sites Zone. Technical Mechanisms: (1) GPO Settings: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn … (CCE-10420-8, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Internet Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn Off First-Run Opt-In HKEY_CURRENT… (CCE-16078-8, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Locked-Down Intranet Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone\Turn Off First… (CCE-15773-5, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zon… (CCE-15044-1, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone\Turn… (CCE-17062-1, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Locked-Down Local Machine Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone\Turn… (CCE-16481-4, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Locked-Down Internet Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone\Turn Off First… (CCE-16223-0, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Local Machine Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone\Turn Off First-Run Opt-In HK… (CCE-15177-9, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Restricted Sites Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn Off First-Run Opt… (CCE-16503-5, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Locked-Down Local Machine Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone\Turn … (CCE-15949-1, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Locked-Down Internet Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone\Turn Off First-… (CCE-16891-4, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone\Turn … (CCE-16105-9, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone… (CCE-16212-3, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Locked-Down Intranet Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone\Turn Off First-… (CCE-16288-3, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Intranet Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone\Turn Off First-Run Opt-In HKEY_LOCAL_MA… (CCE-15762-8, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Intranet Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone\Turn Off First-Run Opt-In HKEY_CURRENT… (CCE-16066-3, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Local Machine Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone\Turn Off First-Run Opt-In HKE… (CCE-15953-3, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Trusted Sites Zone. Technical Mechanisms: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone\Turn Off First-Run Opt-In HKE… (CCE-16256-0, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Trusted Sites Zone. Technical Mechanisms: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone\Turn Off First-Run Opt-In HK… (CCE-16355-0, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Turn Off First- Run Opt-In" setting should be configured correctly for the Internet Zone. (oval:gov.nist.fdcc.ie7:def:1119, FDCC Windows IE7 SCAP content using OVAL (fdcc-ie7-oval.xml, fdcc-ie7-patches.xml), Version 5.4)
  • The "Turn Off First- Run Opt-In" setting should be configured correctly for the Restricted Sites Zone. (oval:gov.nist.fdcc.ie7:def:621, FDCC Windows IE7 SCAP content using OVAL (fdcc-ie7-oval.xml, fdcc-ie7-patches.xml), Version 5.4)
  • Turn Off First-Run Opt-In - Internet Zone - Local Computer (TurnOffFirstRunOptIn_InternetZone_LocalComputer, NIST SCAP Microsoft Internet Explorer Version 7 (fdcc-ie7-xccdf.xml), FDCC IE7 (1.2) SCAP Content - OVAL 5.4)
  • Turn Off First-Run Opt-In - Restricted Sites Zone - Local Computer (TurnOffFirstRunOptIn_RestrictedSitesZone_LocalComputer, NIST SCAP Microsoft Internet Explorer Version 7 (fdcc-ie7-xccdf.xml), FDCC IE7 (1.2) SCAP Content - OVAL 5.4)
  • Turn Off First-Run Opt-In (xccdf_gov.nist_rule_TurnOffFirstRunOptIn_RestrictedSitesZone_LocalComputer, oval:gov.nist.USGCB.ie7:def:621, oval:gov.nist.USGCB.ie7:tst:3782, oval:gov.nist.USGCB.ie7:obj:114, oval:gov.nist.USGCB.ie7:ste:3242, USGCB: Guidance for Securing Microsoft Internet Explorer 7, v1.2.3.1)
  • Turn Off First-Run Opt-In (xccdf_gov.nist_rule_TurnOffFirstRunOptIn_InternetZone_LocalComputer, oval:gov.nist.USGCB.ie7:def:1119, oval:gov.nist.USGCB.ie7:tst:3784, oval:gov.nist.USGCB.ie7:obj:48, oval:gov.nist.USGCB.ie7:ste:3304, USGCB: Guidance for Securing Microsoft Internet Explorer 7, v1.2.3.1)
  • Turn Off First-Run Opt-In (xccdf_gov.nist_rule_TurnOffFirstRunOptIn_InternetZone_LocalComputer, oval:gov.nist.USGCB.ie8:def:31038, oval:gov.nist.USGCB.ie8:tst:31038, oval:gov.nist.USGCB.ie8:obj:31038, oval:gov.nist.USGCB.ie8:ste:31038, USGCB: Guidance for Securing Microsoft Internet Explorer 8, v1.2.3.1)
  • Turn Off First-Run Opt-In (xccdf_gov.nist_rule_TurnOffFirstRunOptIn_RestrictedSitesZone_LocalComputer, oval:gov.nist.USGCB.ie8:def:31079, oval:gov.nist.USGCB.ie8:tst:31079, oval:gov.nist.USGCB.ie8:obj:31079, oval:gov.nist.USGCB.ie8:ste:31079, USGCB: Guidance for Securing Microsoft Internet Explorer 8, v1.2.3.1)