As prescribed in 3439.703, insert the following clause in all solicitations and contracts where software will be developed, maintained, or operated on any system using the FDCC configuration:
(a) (1) The provider of information technology shall certify applications are fully functional and operate correctly as intended on systems using the Federal desktop core configuration (FDCC). This includes Internet Explorer 7 configured to operate on Windows XP and Windows Vista (in Protected Mode on Vista).
(2) For the Windows XP settings, see: http://csrc.nist.gov/itsec/guidance_WinXP.html, and for the Windows Vista settings, see: http://csrc.nist.gov/itsec/guidance_vista.html.
(b) The standard installation, operation, maintenance, update, or patching of software shall not alter the configuration settings from the approved FDCC configuration. The information technology should also use the Windows Installer Service for installation to the default “program files” directory and should be able to silently install and uninstall.
(c) Applications designed for normal end users shall run in the standard user context without elevated system administration privileges.
(End of clause)