Details

This policy setting allows the user interface (UI) options to enable or disable Office automatic updates to be hidden from users. These options are found in the Product Information area of all Office applications installed via Click-to-Run. This policy setting has no effect on Office applications installed via Windows Installer. If this policy setting is enabled, the ‘Enable Updates’ and ‘Disable Updates’ options in the UI are hidden from users. If this policy setting is not configured, the ‘Enable Updates’ and ‘Disable Updates’ options are visible, and users can enable or disable Office automatic updates from the UI.

Solution

Set the policy value for Computer Configuration -> Administrative Templates -> Microsoft Office 2013 (Machine)->Updates->’Hide option to enable or disable updates’ is set to ‘Enabled’.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_OfficeSystem_2013_V2R1_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-6b.
• CAT|II
• CCI|CCI-000366
• Rule-ID|SV-228524r508020_rule
• STIG-ID|DTOO402
• STIG-Legacy|SV-53191
• STIG-Legacy|V-40859
• Vuln-ID|V-228524

Source

• Tenable.com/audits