1. Home
  2. Security Hardening
  3. CIS Microsoft Office Outlook 2013 V1.1.0 L1
  4. Ensure ‘Automatically download attachments’ is set to Disabled

Ensure ‘Automatically download attachments’ is set to Disabled

Details

This policy setting controls whether Outlook downloads files attached to Internet Calendar appointments.

If you enable this policy setting, Outlook automatically downloads all Internet Calendar appointment attachments

If you disable or do not configure this policy setting, Outlook does not download attachments when retrieving Internet Calendar appointments. The recommended state for this setting is: Disabled.

Rationale:

Files attached to Internet Calendar appointments could contain malicious code that could be used to compromise a computer.

By default, Outlook does not download attachments when retrieving Internet Calendar appointments.

Solution

To implement the recommended configuration state, set the following Group Policy setting to Disabled.

User ConfigurationAdministrative TemplatesMicrosoft Outlook 2013Account SettingsInternet CalendarsAutomatically download attachments

Impact:

Disabling this setting enforces the default configuration in Outlook, and therefore is unlikely to cause usability issues for most users.

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Windows.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles