Back

Configure the "Disable 'Configuring History'" setting in specialized security environments properly.


CONTROL ID
04405
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Configure Internet Browser security options according to organizational standards., CC ID: 02166

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • This setting specifies the number of days that Internet Explorer tracks the History List. For Enterprise Client environments, the Disable Configuring History setting is Not Configured. For Specialized Security - Limited Functionality environments, this setting should be set to Enabled:40. If Enabled… (Pg 99, Microsoft Windows Vista Security Guide Appendix A: Security Group Policy Settings)
  • Disable "Configuring History" - Local Computer (DisableConfiguringHistory_LocalComputer, NIST SCAP Microsoft Internet Explorer Version 7 (fdcc-ie7-xccdf.xml), FDCC IE7 (1.2) SCAP Content - OVAL 5.4)
  • This setting specifies the number of days that Internet Explorer keeps track of the pages viewed in the History List. The delete Browsing History option can be accessed using Tools, Internet Options and General tab. (xccdf_gov.nist_rule_DisableConfiguringHistory_LocalComputer, oval:gov.nist.USGCB.ie7:def:757, oval:gov.nist.USGCB.ie7:tst:3620, oval:gov.nist.USGCB.ie7:obj:96, oval:gov.nist.USGCB.ie7:ste:3103, USGCB: Guidance for Securing Microsoft Internet Explorer 7, v1.2.3.1)
  • This setting specifies the number of days that Internet Explorer keeps track of the pages viewed in the History List. The delete Browsing History option can be accessed using Tools, Internet Options and General tab. (xccdf_gov.nist_rule_DisableConfiguringHistory_LocalComputer, oval:gov.nist.USGCB.ie7:def:757, oval:gov.nist.USGCB.ie7:tst:3809, oval:gov.nist.USGCB.ie7:obj:92, oval:gov.nist.USGCB.ie7:ste:3152, USGCB: Guidance for Securing Microsoft Internet Explorer 7, v1.2.3.1)