1. Home
  2. Security Hardening
  3. CIS Microsoft Windows Server 2008 R2 Domain Controller L2 V3 2.0
  4. Ensure ‘Turn off the ‘Order Prints’ picture task’ is set to ‘Enabled’ – Enabled

Ensure ‘Turn off the ‘Order Prints’ picture task’ is set to ‘Enabled’ – Enabled

Details

This policy setting specifies whether the ‘Order Prints Online’ task is available from Picture Tasks in Windows folders.

The Order Prints Online Wizard is used to download a list of providers and allow users to order prints online.

The recommended state for this setting is: Enabled.

Rationale:

In an enterprise managed environment we want to lower the risk of a user unknowingly exposing sensitive data.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled:

Computer ConfigurationPoliciesAdministrative TemplatesSystemInternet Communication ManagementInternet Communication settingsTurn off the ‘Order Prints’ picture task

Note: This Group Policy path is provided by the Group Policy template ICM.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates.

Impact:

The task ‘Order Prints Online’ is removed from Picture Tasks in File Explorer folders.

Default Value:

Disabled. (The ‘Order Prints Online’ task is displayed in Picture Tasks in File Explorer folders.)

References:

CCE-38275-4

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Security Assessment and Authorization, Configuration Management.This control applies to the following type of system Windows.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles