9.8 Configure 'Disable changing Automatic Configuration settings'


This policy setting removes a user's ability to change automatically configured settings.
Administrators use automatic configuration to update browser settings periodically. If you
enable this policy setting, the automatic configuration settings are dimmed in Internet
Explorer. (These settings are located in the Automatic Configuration area of the LAN
Settings dialog box.) This policy setting also removes a user's ability to change settings that
are configured through Group Policy. To view the LAN Settings dialog box1. Open the Internet Options dialog box, and click the Connections tab.
2. Click the LAN Settings button to view the settings.

Note- The Disable the Connections page setting removes the Connections tab from Internet
Explorer in Control Panel and takes precedence over this Disable changing Automatic
Configuration settings configuration option. If the former setting is enabled, the latter
setting is ignored. The Disable the Connections page setting is located in \User
\Administrative Templates\Windows Components\Internet Explorer\Internet
Control Panel in the Group Policy Object Editor. Configure this setting in a manner that is
consistent with security and operational requirements of your organization.


Users could change some of the Internet Explorer security settings, which could enable
users to visit a malicious Web site and download or execute hostile code.


To establish the recommended configuration via Group Policy, set the following UI path to
Not Configured.

Computer Configuration\Administrative Templates\Windows Components\Internet
Explorer\Disable changing Automatic Configuration settings

Impact-Users will be unable to change the automatic configuration settings.

Default Value-Disabled

See Also


Item Details

Audit Name: CIS IE 11 v1.0.0


References: 800-53|SC-7(8)

Plugin: Windows

Control ID: 01e1848cea01b7c030e958fe24e47049468fee569911a29f4d003fb8927eccb2