Back

Configure the "Disable removing channels" setting.


CONTROL ID
04377
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Configure Internet Browser security options according to organizational standards., CC ID: 02166

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • This setting prevents users from disabling channel synchronization. For Enterprise Client environments, the Disable Removing Channels setting should be set to Enabled. For Specialized Security - Limited Functionality environments, this setting is Not Configured. (Pg 118, Microsoft Windows Vista Security Guide Appendix A: Security Group Policy Settings)
  • The "Disable Removing Channels" setting should be configured correctly. Technical Mechanisms: HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions\NoRemovingChannels Parameters: enabled/disabled References: CCE-1069 oval:org.mitre.oval:def:1801 DisableRemovingChannels-Loca… (CCE-4261-4, Common Configuration Enumeration List, Combined XML: Internet Explorer 7, 5.20130214)
  • This setting prevents users from disabling synchronization. The Offline Pages\Disable Removing Channels setting should be Enabled. (Pg 126, NSA Guide to Security Microsoft Windows XP)