Details
By default, creating folder home pages for folders in non-default stores is blocked; you
cannot define a folder home page for a folder that is in a non-default store. This setting
allows you to unblock folder home pages for folders in non-default stores. Note that other
settings might still prevent folder home pages from functioning. The recommended state
for this setting is- Enabled.
*Rationale*
Outlook 2010 allows users to designate Web pages as home pages for personal or public
folders. When a user clicks on a folder, Outlook displays the home page the user has
assigned to it. Although this feature provides the opportunity to create powerful public
folder applications, scripts can be included on Web pages that access the Outlook object
model, which exposes users to security risks. By default, Outlook does not allow users to
define folder home pages for folders in non-default stores. If this configuration is changed,
users can create and access dangerous folder home pages for Outlook data files (.pst) and
other non-default stores, which can compromise the security of the users’ data.
Solution
To implement the recommended configuration state, set the following Group Policy setting
to Enabled.
User ConfigurationAdministrative TemplatesMicrosoft Outlook 2010Outlook
OptionsOtherAdvancedDo not allow folders in non-default stores to be set as folder
home pages
Impact-For more information, see Configure security for Outlook 2010 folder home pages.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.