Detections
Analytics
WN25-CC-000440 - Windows Server 2025 users must be notified if a web-based program attempts to install software.
Information
Web-based programs may attempt to install malicious software on a system. Ensuring users are notified if a web-based program attempts to install software allows them to refuse the installation.Solution
The default behavior is for Internet Explorer to warn users and select whether to allow or refuse installation when a web-based program attempts to install software on the system.To correct this, configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Installer >> Prevent Internet Explorer security prompt for Windows Installer scripts to 'Not Configured' or 'Disabled'.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R1_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2025 STIG v1r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-278122r1182069_rule, STIG-ID|WN25-CC-000440, Vuln-ID|V-278122
Plugin: Windows
Control ID: fb588d251a297fb6bab357e806e5e0bfcd7a3fdeb00d7f76ef74f8dedb19a607