Details

All installed trusted COM addins can be trusted. Exchange Settings for the addins still override if present and this option is selected.

Solution

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Outlook 2016 -> Security ‘Configure Add-In Trust Level’ to ‘Enabled (Trust all loaded and installed COM addins)’.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Outlook_2016_V2R1_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Windows.

References

• 800-53|SC-18(4)
• CAT|II
• CCI|CCI-001170
• Rule-ID|SV-228436r508021_rule
• STIG-ID|DTOO236
• STIG-Legacy|SV-85775
• STIG-Legacy|V-71151
• Vuln-ID|V-228436

Source

• Tenable.com/audits