Details

This policy setting prevents the user from specifying the update check interval. The default

value is 30 days. If you enable this policy setting, the user cannot specify the update check

interval. You must specify the update check interval. If you disable or do not configure this

policy setting, the user can specify the update check interval. The recommended state for

this setting is- Enabled-30.

*Rationale*

Enabling this setting will ensure that updates are downloaded at the interval specified by

the organization’s information technology team.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to
Enabled.

Computer ConfigurationAdministrative TemplatesWindows ComponentsInternet
ExplorerInternet SettingsComponent UpdatesPeriodic check for updates to Internet
Explorer and Internet ToolsPrevent specifying the update check interval (in days)Then set the Update check interval (in days)- option to 30.

Impact-If you enable this policy setting, the user cannot specify the update check interval. You must
specify the update check interval. If you disable or do not configure this policy setting, the
user can specify the update check interval.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1518

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Windows.

References

• 800-53|SI-2(5)

Source

• Tenable.com/audits