Check: 5.060
Windows 2003 DC STIG:
5.060
(in version v6 r40)
Title
Media Player must be configured to prevent automatic checking for updates. (Cat II impact)
Discussion
Uncontrolled system updates can introduce issues to a system. The automatic check for updates performed by Windows Media Player must be disabled to ensure a constant platform and to prevent the introduction of unknown\untested software on the system.
Check Content
Fix Text
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Media Player -> "Prevent Automatic Updates" to "Enabled".
Additional Identifiers
Rule ID: SV-40094r2_rule
Vulnerability ID: V-3480
Group Title:
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
Number | Definition |
---|---|
CCI-001812 |
The information system prohibits user installation of software without explicit privileged status. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
Number | Title |
---|---|
CM-11(2) |
Prohibit Installation Without Privileged Status |