1. Home
  2. Security Hardening
  3. DISA STIG Microsoft Office System 2013 V2R1
  4. DTOO193 – Automation Security to enforce macro level security in Office documents must be configured.
Searching...

DTOO193 – Automation Security to enforce macro level security in Office documents must be configured.

Details

When a separate program is used to launch Microsoft Office Excel, PowerPoint, or Word programmatically, any macros can run in the programmatically opened application without being blocked. This functionality could allow an attacker to use automation to run malicious code in Excel, PowerPoint, or Word.

Solution

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2013 -> Security Settings ‘Automation Security’ to ‘Enabled (Use application macro security level)’.

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Windows.

References

Source

Updated on July 16, 2022
Was this article helpful?
Yes No

Related Articles