18.9.18.2 Ensure 'Turn Off user-installed desktop gadgets' is set to 'Enabled'

Information

This policy setting allows you to turn off desktop gadgets that have been installed by the user.

The recommended state for this setting is: Enabled.

Rationale:

Allowing gadgets could allow users to install custom gadgets that could be malicious.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled:

Computer Configuration\Policies\Administrative Templates\Windows Components\Desktop Gadgets\Turn Off user-installed desktop gadgets

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template Sidebar.admx/adml that is included with the Microsoft Windows 7 & Server 2008 R2 Administrative Templates (or newer).

Impact:

Windows will not run any user-installed gadgets.

Default Value:

Disabled. (User-installed desktop gadgets are turned on.)

See Also

https://workbench.cisecurity.org/files/2700

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-11(2), CSCv6|2

Plugin: Windows

Control ID: 159006289aa968d68acf141bbd4fd8d54ec7213bb40b512bbdea6fdb672aa01c