Detections
Analytics
WN11-CC-000320 - Users must be notified if a web-based program attempts to install software.
Information
Web-based programs may attempt to install malicious software on a system. Ensuring users are notified if a web-based program attempts to install software allows them to refuse the installation.Solution
The default behavior is for Internet Explorer to warn users and select whether to allow or refuse installation when a web-based program attempts to install software on the system.To correct this, configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Installer >> 'Prevent Internet Explorer security prompt for Windows Installer scripts' to 'Not Configured' or 'Disabled'.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R11_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows 11 STIG v2r11
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-253412r1268251_rule, STIG-ID|WN11-CC-000320, Vuln-ID|V-253412
Plugin: Windows
Control ID: 1f055f20a667d900eac2ace39487aee355852e30e735a8c5ac89673c5e31955a