1.6 Ensure 'Ask where to save each file before downloading' is set to 'Enabled'

Information

Google Chrome offers to download files automatically to the default download directory without prompting.

If this setting is enabled, users are always asked where to save each file before downloading.

The recommended state for this setting is: Enabled (1)

Rationale:

Users shall be prevented from the drive-by-downloads threat.

Impact:

None - This is the default behavior.

Solution

To establish the recommended configuration via Group Policy, set the
following UI path to Enabled:

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Ask where to save each file before downloading

Default Value:

Unset (Same as Enabled, but user can change)

See Also

https://workbench.cisecurity.org/benchmarks/8691

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(2)

Plugin: Windows

Control ID: 860e7a35b9bf204280bcf3566be1397fe925e56caa826157c99295c1ca0274f8