Check: WN12-UC-000005
Microsoft Windows Server 2012/2012 R2 Member Server STIG:
WN12-UC-000005
(in versions v3 r7 through v2 r7)
Title
Notifications from Windows Push Network Service must be turned off. (Cat III impact)
Discussion
The Windows Push Notification Service (WNS) allows third-party vendors to send updates for toasts, tiles, and badges.
Check Content
If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_CURRENT_USER Registry Path: \SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications\ Value Name: NoCloudApplicationNotification Type: REG_DWORD Value: 1
Fix Text
Configure the policy value for User Configuration -> Administrative Templates -> Start Menu and Taskbar -> Notifications -> "Turn off notifications network usage" to "Enabled".
Additional Identifiers
Rule ID: SV-225536r569185_rule
Vulnerability ID: V-225536
Group Title: SRG-OS-000095-GPOS-00049
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000381 |
The organization configures the information system to provide only essential capabilities. |
Controls
Number | Title |
---|---|
CM-7 |
Least Functionality |