Back

Configure the "Disable Periodic Check for Internet Explorer software updates" setting.


CONTROL ID
04338
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Configure Internet Browser security options according to organizational standards., CC ID: 02166

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • This setting determines if Internet Explorer checks for updated versions of its software. Two settings exist to prevent the automatic updates of Internet Explorer. The Disable Periodic Check For Internet Explorer Software Updates setting should be Enabled. For Enterprise Client environments, the Aut… (Pg 82, Pg 105, Microsoft Windows Vista Security Guide Appendix A: Security Group Policy Settings)
  • This setting determines if Internet Explorer checks the Microsoft web site for updates to the Internet Explorer software. The "Disable Periodic Check for Internet Explorer Software Updates" value should be set to Enabled. The HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\InfoDeliv… (§ 5.5.2.6, DISA Windows Server 2003 Security Checklist, Version 6 Release 1.11)
  • The system should not go to the Microsoft web site to check for updates to the Internet Explorer software. The "Disable periodic check for Internet Explorer software updates" value should be set to Enabled. The "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\InfoDelivery\Restrictio… (§ 3.7.1.8 (5.033), DISA Windows VISTA Security Checklist, Version 6 Release 1.11)
  • Internet Explorer should not be configured to automatically go to the Microsoft web site to check for updates. The "Disable Periodic Check for Internet Explorer Software Updates" value should be set to Enabled. The HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\InfoDelivery\Restric… (§ 5.5.2.6, DISA Windows XP Security Checklist, Version 6 Release 1.11)
  • The "Disable Periodic Check For Internet Explorer Software Updates" setting should be configured correctly. Technical Mechanisms: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\InfoDelivery\Restrictions\NoUpdateCheck Local Internet Options: GPO Settings:[Computer Configuration | … (CCE-3576-6, Common Configuration Enumeration List, Combined XML: Internet Explorer 7, 5.20130214)
  • The "Disable Periodic Check For Internet Explorer Software Updates" setting should be configured correctly. Technical Mechanisms: GPO Settings: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Disable Periodic Check for Internet Explorer software updates Registry… (CCE-10634-4, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Disable Periodic Check For Internet Explorer Software Updates" setting should be configured correctly. Technical Mechanisms: (1) HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\InfoDelivery\Restrictions\NoUpdateCheck (2) Local Internet Options: (3) GPO Settings:[Computer Con… (CCE-3874-5, Common Configuration Enumeration List, Combined XML: Windows 2000, 5.20130214)
  • The "Disable Periodic Check For Internet Explorer Software Updates" setting should be configured correctly. (oval:gov.nist.fdcc.ie7:def:1357, FDCC Windows IE7 SCAP content using OVAL (fdcc-ie7-oval.xml, fdcc-ie7-patches.xml), Version 5.4)
  • Disable Periodic Check For Internet Explorer Software Updates - Local Computer (DisablePeriodicCheckForIESoftwareUpdates_LocalComputer, NIST SCAP Microsoft Internet Explorer Version 7 (fdcc-ie7-xccdf.xml), FDCC IE7 (1.2) SCAP Content - OVAL 5.4)
  • This setting determines if Internet Explorer will check for updated versions of its software. The Disable Periodic Check For Internet Explorer Software Updates setting should be Enabled. (Pg 89, NSA Guide to Security Microsoft Windows XP)