Details

All installed trusted COM addins can be trusted. Exchange settings for the addins still override if present and this option is selected.

Solution

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Outlook 2013 -> Security ‘Prevent users from customizing attachment security settings’ to ‘Enabled’.

Supportive Information

The following resource is also helpful.

• https://iasecontent.disa.mil/stigs/zip/U_MS_Outlook_2013_V1R13_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Windows.

References

• 800-53|SC-18(4)
• CAT|II
• CCI|CCI-001170
• Rule-ID|SV-53929r1_rule
• STIG-ID|DTOO238
• Vuln-ID|V-17766

Source

• Tenable.com/audits