UCF STIG Viewer Logo

AutoComplete feature for forms must be disallowed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-15574 DTBI690 SV-40691r1_rule ECSC-1 Medium
Description
This AutoComplete feature suggests possible matches when users are filling in forms. If you enable this setting, the user is not suggested matches when filling forms. The user cannot change it. If you disable this setting, the user is suggested possible matches when filling forms. The user cannot change it. If you do not configure this setting, the user has the freedom to turn on the auto-complete feature for forms. To display this option, the users open the Internet Options dialog box, click the Contents Tab and click the Settings button.
STIG Date
Microsoft Internet Explorer 9 Security Technical Implementation Guide 2015-12-17

Details

Check Text ( C-39421r4_chk )
The policy value for User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> "Disable AutoComplete for forms" must be “Enabled”.

Procedure: Use the Windows Registry Editor to navigate to the following key:
HKCU\Software\Policies\Microsoft\Internet Explorer\Main

Criteria: If the value Use FormSuggest is REG_SZ = no, this is not a finding.
Fix Text (F-34549r1_fix)
Set the policy value for User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> "Disable AutoComplete for forms" to “Enabled”.