Back

Configure the "Disable channel user interface completely" setting.


CONTROL ID
04372
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Configure Internet Browser security options according to organizational standards., CC ID: 02166

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • This setting prevents users from viewing the Channel Bar. For Enterprise Client environments, the Disable Channel User Interface Completely setting should be set to Enabled. For Specialized Security - Limited Functionality environments, this setting is Not Configured. (Pg 117, Microsoft Windows Vista Security Guide Appendix A: Security Group Policy Settings)
  • The "Disable Channel User Interface Completely" setting should be configured correctly. Technical Mechanisms: HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions\NoChannelUI Parameters: enabled/disabled References: CCE-298 oval:org.mitre.oval:def:1782 DisableChannelUserIn… (CCE-3742-4, Common Configuration Enumeration List, Combined XML: Internet Explorer 7, 5.20130214)
  • This setting removes the Channel Bar interface. The Offline Pages\Disable Channel User Interface Completely setting should be Enabled. (Pg 125, NSA Guide to Security Microsoft Windows XP)