File Explorer shell protocol must run in protected mode.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-15683	WN12-CC-000091	SV-53045r1_rule	ECSC-1	Medium

Description
The shell protocol will limit the set of folders applications can open when run in protected mode. Restricting files an application can open to a limited set of folders increases the security of Windows.

STIG	Date
Windows Server 2012 / 2012 R2 Member Server Security Technical Implementation Guide	2015-06-26

Details

Check Text ( None )
None

Fix Text (F-45971r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> File Explorer -> "Turn off shell protocol protected mode" to "Disabled".