Details

This policy setting configures Internet Explorer to automatically install new versions of

Internet Explorer when they are available. If you enable this policy setting, automatic

upgrade of Internet Explorer will be turned on.

If you disable this policy setting, automatic upgrade of Internet Explorer will be turned

off. If you do not configure this policy, users can turn on or turn off automatic updates from

the About Internet Explorer dialog. Configure this setting in a manner that is consistent

with security and operational requirements of your organization.

*Rationale*

There’s no known vulnerability at this time, but organizations that manage software and

patches may want to disable the setting.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to
Not Configured.

Computer ConfigurationAdministrative TemplatesWindows ComponentsInternet
ExplorerInstall new versions of Internet Explorer automatically
5 Certificates and Protocols

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1518

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Windows.

References

• 800-53|SI-2(5)

Source

• Tenable.com/audits