Title

Users can change the advanced settings in IE. (Cat II impact)

Discussion

Since most of the IE settings can be changed through the GUI, it is important to ensure that user's cannot change these settings. Some settings will restrict users from visiting certain sites or will restrict the functionality of sites. It is important that access to changing the settings is removed.

Check Content

Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel Criteria: If the value AdvancedTab is 1, this is not a finding. If the value is not 1 or the key is not present, this is a finding.

Fix Text

Change the registry key HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel to the value AdvancedTab is 1.

Additional Identifiers

Rule ID: SV-6292r1_rule

Vulnerability ID: V-6242

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.