Title

The system must be configured to replace occurrences of the word, Microsoft, with a specified string in all error report dialogs. (Cat III impact)

Discussion

Windows Error Reporting information can be used to help diagnose day-to-day software issues, as well as help discover malicious code and possibly zero-day attacks on systems. This setting replaces instances of "Microsoft" with a local organizational name in all error reporting dialog boxes.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> System -> Error Reporting -> "Configure Error Reporting" to "Enabled" with "Replace instances of the word 'Microsoft' with:" left blank.

Additional Identifiers

Rule ID: SV-70815r1_rule

Vulnerability ID: V-56555

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.