Title

Add-on performance notifications must be disallowed. (Cat II impact)

Discussion

This policy setting prevents Internet Explorer from displaying a notification when the average time it takes to load all the user's enabled add-ons exceeds the threshold. The notification informs the user that add-ons are slowing their browsing and displays a button which opens the Disable Add-ons dialog box. The Disable Add-ons dialog box displays the load time for each group of add-ons enabled in the browser. It allows the user to disable add-ons and configure the threshold. If you enable this policy setting, users will not be notified when the average time it takes to load all the user's enabled add-ons exceeds the threshold.

Check Content

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> "Disable add-on performance notifications" must be “Enabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext Criteria: If the value DisableAddonLoadTimePerformanceNotifications is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> "Disable add-on performance notifications" to “Enabled”.

Additional Identifiers

Rule ID: SV-40754r1_rule

Vulnerability ID: V-30774

Group Title: DTBI745 - Add-On Performance Notifications

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.