Details

Users could send email messages to request that they be taken off a mailing list. If the email recipient is then automatically added to the Safe Senders List, future e mail messages from that address will no longer be sent to the users Junk email folder, even if it would otherwise be considered junk.

By default, recipients of outgoing messages are not added automatically to individual users’ Safe Senders Lists. However, users can change this configuration in the Outlook user interface.

Solution

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Outlook 2013 -> Outlook Options -> Preferences -> Junk E-mail ‘Add e-mail recipients to users’ Safe Senders Lists’ to ‘Disabled’.

Supportive Information

The following resource is also helpful.

• https://iasecontent.disa.mil/stigs/zip/U_MS_Outlook_2013_V1R13_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-6b.
• CAT|II
• CCI|CCI-000366
• Rule-ID|SV-53885r1_rule
• STIG-ID|DTOO224
• Vuln-ID|V-17558

Source

• Tenable.com/audits