Detections
Analytics

1.144 WN10-CC-000210

Information

The Windows Defender SmartScreen for Explorer must be enabled.

GROUP ID: V-220836RULE ID: SV-220836r958478

Windows Defender SmartScreen helps protect systems from programs downloaded from the internet that may be malicious. Enabling Windows Defender SmartScreen will warn or prevent users from running potentially malicious programs.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> File Explorer >> 'Configure Windows Defender SmartScreen'

to 'Enabled' with 'Warn and prevent bypass' selected.

Windows 10 includes duplicate policies for this setting. It can also be configured under

Computer Configuration >> Administrative Templates >> Windows Components >> Windows Defender SmartScreen >> Explorer.

v1607 LTSB:Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> File Explorer >> 'Configure Windows SmartScreen'

to 'Enabled'. (Selection options are not available.)

v1507 LTSB:Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> File Explorer >> 'Configure Windows SmartScreen'

to 'Enabled' with 'Require approval from an administrator before running downloaded unknown software' selected.

See Also

https://workbench.cisecurity.org/benchmarks/23869

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-220836r958478_rule, STIG-ID|WN10-CC-000210, Vuln-ID|V-220836

Plugin: Windows

Control ID: 6dad7fc1ce419558ad97280d841fd9f08e4f57a0e5eb3ba59ce5d3484d1ff6f3