Back

Configure the "Disable Automatic Install of Internet Explorer components" setting.


CONTROL ID
04337
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Configure Internet Browser security options according to organizational standards., CC ID: 02166

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • This setting prevents Internet Explorer from downloading required components. The Disable Automatic Install Of Internet Explorer Components setting should be Enabled. (Pg 81, Microsoft Windows Vista Security Guide Appendix A: Security Group Policy Settings)
  • This setting prevents the automatic installation of Internet Explorer components. The "Disable Automatic Install of Internet Explorer components" value should be set to Enabled. The HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\InfoDelivery\Restrictions\NoJITSetup value should be … (§ 5.5.2.5, DISA Windows Server 2003 Security Checklist, Version 6 Release 1.11)
  • If a site requires Internet Explorer to have a component that is not currently installed, the component should not be automatically installed. The "Disable automatic install of Internet Explorer components" value should be set to Enabled. The "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet … (§ 3.7.1.8 (5.032), DISA Windows VISTA Security Checklist, Version 6 Release 1.11)
  • If uninstalled Internet Explorer components are needed to display information on a web site (e.g., ActiveX controls), these components should not be automatically installed. The "Disable Automatic Install of Internet Explorer components" value should be set to Enabled. The HKEY_LOCAL_MACHINE\Softwar… (§ 5.5.2.5, DISA Windows XP Security Checklist, Version 6 Release 1.11)
  • The "Disable Automatic Install of Internet Explorer Components" setting should be configured correctly. Technical Mechanisms: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\InfoDelivery\Restrictions\NoJITSetup Local Internet Options: GPO Settings:[Computer Configuration | User Co… (CCE-3518-8, Common Configuration Enumeration List, Combined XML: Internet Explorer 7, 5.20130214)
  • The "Disable Automatic Install of Internet Explorer components" setting should be configured correctly. Technical Mechanisms: GPO Settings: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Disable Automatic Install of Internet Explorer components Registry Key: HK… (CCE-9987-9, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Disable Automatic Install of Internet Explorer Components" setting should be configured correctly. Technical Mechanisms: (1) HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\InfoDelivery\Restrictions\NoJITSetup (2) Local Internet Options: (3) GPO Settings:[Computer Configurati… (CCE-3962-8, Common Configuration Enumeration List, Combined XML: Windows 2000, 5.20130214)
  • The "Disable Automatic Install of Internet Explorer Components" setting should be configured correctly. Technical Mechanisms: (1) HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\InfoDelivery\Restrictions\NoJITSetup (2) Local Internet Options: (3) GPO Settings:[Computer Configurati… (CCE-3598-0, Common Configuration Enumeration List, Combined XML: Windows Server 2003, 5.20130214)
  • The "Disable Automatic Install of Internet Explorer Components" setting should be configured correctly. (oval:gov.nist.fdcc.ie7:def:1198, FDCC Windows IE7 SCAP content using OVAL (fdcc-ie7-oval.xml, fdcc-ie7-patches.xml), Version 5.4)
  • Disable Automatic Install of Internet Explorer Components - Local Computer (DisableAutomaticInstallOfIEComponents_LocalComputer, NIST SCAP Microsoft Internet Explorer Version 7 (fdcc-ie7-xccdf.xml), FDCC IE7 (1.2) SCAP Content - OVAL 5.4)
  • This setting prevents Internet Explorer from downloading components some Web sites require to function properly. The Disable Automatic Install Of Internet Explorer Components setting should be Enabled. (Pg 89, NSA Guide to Security Microsoft Windows XP)