Microsoft Internet Explorer 9 STIG Version Comparison

There are 135 differences between versions v1 r7 (Jan. 1, 0001) (the "left" version) and v1 r15 (Jan. 22, 2016) (the "right" version).

Check DTBI001 was added to the benchmark in the "right" version.

This check's original form is available here.

Title

The IE home page is not set to blank or a trusted site.

Check Content

The policy for User Configuration -> Policies -> Administrative Templates -> Windows Components -> Internet Explorer "Disable changing home page settings" must be "Enable" and specify the URL for the home page. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Microsoft\Internet Explorer\Main Criteria: If the value Start Page is about:blank or a trusted site this is not a finding.

Discussion

By setting this parameter appropriately, a malicious web site will not be automatically loaded into a browser which may contain mobile code.

Fix

Set the policy for User Configuration -> Policies -> Administrative Templates -> Windows Components -> Internet Explorer "Disable changing home page settings" to "Enable" and specify the URL for the home page.