Details

This policy setting prevents the user from changing the default URL for checking updates to

Internet Explorer and Internet Tools. If you enable this policy setting, the user cannot

change the URL that is displayed for checking updates to Internet Explorer and Internet

Tools. You must specify this URL. If you disable or do not configure this policy setting, the

user can change the URL that is displayed for checking updates to Internet Explorer and

Internet Tools. Configure this setting in a manner that is consistent with security and

operational requirements of your organization.

*Rationale*

Enabling this setting will ensure that updates are downloaded from sites specified by the

organization’s information technology team.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to
Not Configured.

Computer ConfigurationAdministrative TemplatesWindows ComponentsInternet
ExplorerInternet SettingsComponent UpdatesPeriodic check for updates to Internet
Explorer and Internet ToolsPrevent changing the URL for checking updates to Internet
Explorer and Internet Tools- URL to be displayed for updates-

Impact-If you enable this policy setting, the user cannot change the URL that is displayed for
checking updates to Internet Explorer and Internet Tools. You must specify this URL. If you
disable or do not configure this policy setting, the user can change the URL that is displayed
for checking updates to Internet Explorer and Internet Tools.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1518

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Windows.

References

• 800-53|SI-2(5)

Source

• Tenable.com/audits