CCE-35960-4Platform: win2012r2 | Date: (C)2015-10-08 (M)2022-10-10 |
Do not use the tracking-based method when resolving shell shortcuts
Prevents the system from using NTFS tracking features to resolve a shortcut.
By default, when the system cannot find the target file for a shortcut (.lnk), it searches all paths associated with the shortcut. If the target file is located on an NTFS partition, the system then uses the target's file ID to find a path. If the resulting path is not correct, it conducts a comprehensive search of the target drive in an attempt to find the file.
If you enable this setting, the system does not try to locate the file by using its file ID. It skips this step and begins a comprehensive search of the drive specified in the target path.
Note: This setting only applies to target files on NTFS partitions. FAT partitions do not have this ID tracking and search capability.
Also, see the 'Do not track Shell shortcuts during roaming' and the 'Do not use the search-based method when resolving shell shortcuts' settings.
Parameter:
Technical Mechanism:
(1) GPO: User Configuration\Administrative Templates\Start Menu and Taskbar!Do not use the tracking-based method when resolving shell shortcuts
(2) REG: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveTrack
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:27220 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:27220 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:27220 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:27220 |