Title

Information shared with Bing in Search must be configured to the most restrictive setting. (Cat II impact)

Discussion

Various levels of information can be shared with Bing in Search, to include user information and location. Configuring this setting prevents users from selecting the level of information shared and enables the most restrictive selection.

Check Content

Verify the registry value below. If it does not exist or is not configured as specified, this is a finding. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Windows Search\ Value Name: ConnectedSearchPrivacy Value Type: REG_DWORD Value: 3

Fix Text

Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Search >> "Set what information is shared in Search" to "Enabled" with "Anonymous" selected in "Type of Information".

Additional Identifiers

Rule ID: SV-55995r3_rule

Vulnerability ID: V-43242

Group Title: WINCC-000142

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.