18.8.22.1.11 (L2) Ensure 'Turn off the 'Publish to Web' task for files and folders' is set to 'Enabled'

Information

This policy setting specifies whether the tasks Publish this file to the Web, Publish this folder to the Web, and Publish the selected items to the Web are available from File and Folder Tasks in Windows folders. The Web Publishing wizard is used to download a list of providers and allow users to publish content to the Web.
The recommended state for this setting is: Enabled.

Rationale:
Users may publish confidential or sensitive information to a public service outside of the control of the organization.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled:
Computer Configuration\Policies\Administrative Templates\System\Internet Communication Management\Internet Communication settings\Turn off the 'Publish to Web' task for files and folders

Note: This Group Policy path is provided by the Group Policy template ICM.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates.

Impact:
The 'Publish to Web' task is removed from File and Folder tasks in Windows folders.

Default Value:
Disabled. (The 'Publish to Web' task is shown in File and Folder tasks in Windows folders.)

References:
1. CCE-33246-0

See Also

https://workbench.cisecurity.org/benchmarks/14249

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, CONFIGURATION MANAGEMENT

References: 800-53|CA-7, 800-53|CM-6, CSCv6|13, CSCv7|5.1, CSCv7|13.3

Plugin: Windows

Control ID: 392d3d4a1a6a866f39a850d21dc6f1e9b71d96c34822c77403b191b62445824b