Home
Security Hardening
DISA STIG Microsoft Office System 2013 V2R1

DISA STIG Microsoft Office System 2013 V2R1

DTOO190 – The encryption type for password protected Office 97 thru Office 2003 must be set.
Details If unencrypted files are intercepted, sensitive information in the files can be compromised. To protect information confidentiality, Microsoft Office...
DTOO191 – ActiveX control initialization must be disabled.
Details ActiveX controls can adversely affect a computer directly. In addition, malicious code can be used to compromise an ActiveX...
DTOO192 – Load controls in forms3 must be disabled from loading.
Details ActiveX controls are Component Object Model (COM) objects and have unrestricted access to users’ computers. ActiveX controls can access...
DTOO193 – Automation Security to enforce macro level security in Office documents must be configured.
Details When a separate program is used to launch Microsoft Office Excel, PowerPoint, or Word programmatically, any macros can run...
DTOO194 – Hyperlink warnings for Office must be configured for use.
Details Unsafe hyperlinks are links that might pose a security risk if users click them. Clicking an unsafe link could...
DTOO195 – Passwords for secured documents must be enforced.
Details If 2013 Office users add passwords to documents, other users can be prevented from opening the documents. This capability...
DTOO196 – A mix of policy and user locations for Office Products must be disallowed.
Details When Microsoft Office files are opened from trusted locations, all the content in the files is enabled and active....
DTOO197 – Smart Documents use of Manifests in Office must be disallowed.
Details An XML expansion pack is the group of files that constitutes a Smart Document in Excel and Word. One...
DTOO198 – The Internet Fax Feature must be disabled.
Details Excel, PowerPoint, and Word users can use the Internet Fax feature to send documents to fax recipients through an...
DTOO199 – Changing permissions on rights managed content for users must be enforced.
Details This setting controls whether Office 2013 users can change permissions for content that is protected with Information Rights Management...

Prev Next

DISA STIG Microsoft Office System 2013 V2R1

DTOO190 – The encryption type for password protected Office 97 thru Office 2003 must be set.

DTOO191 – ActiveX control initialization must be disabled.

DTOO192 – Load controls in forms3 must be disabled from loading.

DTOO193 – Automation Security to enforce macro level security in Office documents must be configured.

DTOO194 – Hyperlink warnings for Office must be configured for use.

DTOO195 – Passwords for secured documents must be enforced.

DTOO196 – A mix of policy and user locations for Office Products must be disallowed.

DTOO197 – Smart Documents use of Manifests in Office must be disallowed.

DTOO198 – The Internet Fax Feature must be disabled.

DTOO199 – Changing permissions on rights managed content for users must be enforced.