18.8.22.1.8 (L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'

Information

This policy setting specifies whether the Windows Registration Wizard connects to Microsoft.com for online registration.
The recommended state for this setting is: Enabled.

Rationale:
Users in an enterprise managed environment should not be registering their own copies of Windows, providing their own PII in the process.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled:
Computer Configuration\Policies\Administrative Templates\System\Internet Communication Management\Internet Communication settings\Turn off Registration if URL connection is referring to Microsoft.com
Note: This Group Policy path is provided by the Group Policy template ICM.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates.

Impact:
Users are blocked from connecting to Microsoft.com for online registration and they cannot register their copy of Windows online.

Default Value:
Disabled. (Users can connect to Microsoft.com to complete the online Windows Registration.)

References:
1. CCE-33216-3

See Also

https://workbench.cisecurity.org/benchmarks/14249

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-4(8), CSCv7|7.4

Plugin: Windows

Control ID: e54faa097a8d785888a54753d2d77c62c31e164cef8dacaa0aaa8d9c71d33c8f