Title

Notifications from Windows Push Network Service must be turned off. (Cat III impact)

Discussion

The Windows Push Notification Service (WNS) allows third-party vendors to send updates for toasts, tiles, and badges.

Check Content

If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_CURRENT_USER Registry Path: \SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications\ Value Name: NoCloudApplicationNotification Type: REG_DWORD Value: 1

Fix Text

Configure the policy value for User Configuration -> Administrative Templates -> Start Menu and Taskbar -> Notifications -> "Turn off notifications network usage" to "Enabled".

Additional Identifiers

Rule ID: SV-226361r794636_rule

Vulnerability ID: V-226361

Group Title: SRG-OS-000095-GPOS-00049

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.