Back

Configure the "Disable adding channels" setting in Internet Explorer properly.


CONTROL ID
04369
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Configure Internet Browser security options according to organizational standards., CC ID: 02166

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • This setting prevents users from adding channels. For Enterprise Client environments, the Disable Adding Channels setting should be set to Enabled. For Specialized Security - Limited Functionality environments, this setting is Not Configured. (Pg 116, Microsoft Windows Vista Security Guide Appendix A: Security Group Policy Settings)
  • The "Disable Adding Channels" setting should be configured correctly. Technical Mechanisms: HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions\NoAddingChannels Parameters: enabled/disabled References: CCE-716 oval:org.mitre.oval:def:1383 DisableAddingChannels-LocalUser (CCE-3389-4, Common Configuration Enumeration List, Combined XML: Internet Explorer 7, 5.20130214)
  • This setting prevents users from adding channels to Internet Explorer. Channels are Web sites that are updated automatically at an interval determined by the channel provider. The Offline Pages\Disable Adding Channels setting should be Enabled. (Pg 124, NSA Guide to Security Microsoft Windows XP)