Google Chrome Current Windows Security Technical Implementation Guide

The Google Chrome Current Windows Security Technical Implementation Guide (V2 R11) has 46 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

46STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R11

CurrentPublished Wed Jul 02 2025

Prompt for download location must be enabled.

Google Chrome Current Windows Security Technical Implementation Guide

Assessment Title

Rule Text

Prompt for download location must be enabled.

Description

Discussion Text

If the policy is enabled, the user will be asked where to save each file before downloading. If the policy is disabled, downloads will start immediately, and the user will not be asked where to save the file. If the policy is not configured, the user will be able to change this setting.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-221587

Rule

SV-221587r960879_rule

Severity

medium

Rule Version

DTBC-0053

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Universal method:
1. In the omnibox (address bar) type chrome:// policy
2. If "PromptForDownloadLocation" is not displayed under the "Policy Name" column or it is not set to "true" under the "Policy Value" column, then this is a finding.
Windows method:
1. Start regedit
2. Navigate to HKLM\Software\Policies\Google\Chrome\
3. If the "PromptForDownloadLocation" value name does not exist or its value data is not set to "1", this is a finding.

Implementation Procedure

Fix Text

Windows group policy:
1. Open the group policy editor tool with gpedit.msc
2. Navigate to Policy Path:  Computer Configuration\Administrative Templates\Google\Google Chrome\
 Policy Name: Ask where to save each file before downloading
 Policy State:  Enabled
 Policy Value: N/A

STIG check 24 of 46 in the Google Chrome Current Windows STIG checklist

← Previous · V-221586Deletion of browser history must be disabled.Next · V-221588 →Download restrictions must be configured.