Title

Internet Connection Wizard ISP Downloads (Cat III impact)

Discussion

This check verifies that the Internet Connection Wizard cannot download a list of Internet Service Providers (ISPs) from Microsoft.

Check Content

If the following registry value doesn’t exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Policies\Microsoft\Windows\Internet Connection Wizard\ Value Name: ExitOnMSICW Type: REG_DWORD Value: 1

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> System -> Internet Communication Management -> Internet Communication settings “Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com” to “Enabled”.

Additional Identifiers

Rule ID: SV-16590r1_rule

Vulnerability ID: V-15673

Group Title: Internet Connection Wizard ISP Downloads

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.