Detections
Analytics
WN25-CC-000330 - Windows Server 2025 File Explorer shell protocol must run in protected mode.
Information
The shell protocol will limit the set of folders that applications can open when run in protected mode. Restricting files an application can open to a limited set of folders increases the security of Windows.Solution
The default behavior is for shell protected mode to be turned on for File Explorer.To correct this, configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> File Explorer >> Turn off shell protocol protected mode to 'Not Configured' or 'Disabled'.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R1_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2025 STIG v1r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-278111r1182065_rule, STIG-ID|WN25-CC-000330, Vuln-ID|V-278111
Plugin: Windows
Control ID: 351dccd87931e8d832c9a87dc750648664102f1b9ccd492c7180591637222c01