Details

This policy setting specifies whether the tasks Publish this file to the Web, Publish this folder to the Web, and Publish the selected items to the Web are available from File and Folder Tasks in Windows folders.

The recommended state for this setting is: Enabled.

Rationale:

Users may publish confidential or sensitive information to a public service outside of the control of the organization.

Impact:

The ‘Publish to Web’ task is removed from File and Folder tasks in Windows folders.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled:

Computer ConfigurationPoliciesAdministrative TemplatesSystemInternet Communication ManagementInternet Communication settingsTurn off the ‘Publish to Web’ task for files and folders

Note: This Group Policy path is provided by the Group Policy template ICM.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates.

Default Value:

Disabled. (The ‘Publish to Web’ task is shown in File and Folder tasks in Windows folders.)

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3345

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-7
• CSCv7|9.2

Source

• Tenable.com/audits