1.9.8.1.2.5 Ensure 'Restrict upload method' is set to Enabled

Information

This policy setting controls whether Outlook can automatically upload calendar updates to Office.com.
If you enable this policy setting, Outlook enforces the 'Single Upload: Updates will not be uploaded from the Published Calendar Settings dialog' option, and calendar updates are not uploaded. Users will not be able to change this setting.
If you disable this policy setting Outlook automatically publishes calendar updates to Office.com at regular intervals and users will not be able to change this.
If you do not configure this policy setting, when users publish their calendar to Office.com using the Microsoft Outlook Calendar Sharing Service, Outlook updates the calendars online at regular intervals unless they click 'Advanced' and select 'Single Upload: Updates will not be uploaded from the Published Calendar Settings dialog'. The recommended state for this setting is: Enabled.

Rationale:

By default, when users publish their calendar to Microsoft Office.com using the Microsoft Office Outlook Calendar Sharing Service, Outlook updates the calendars online at regular intervals unless they click Advanced and select Single Upload: Updates will not be uploaded from the Published Calendar Settings dialog box. If your organization has policies that govern the use of external resources such as Microsoft Office.com, allowing Outlook to publish calendar updates automatically might violate those policies.

Solution

To implement the recommended configuration state, set the following Group Policy setting to Enabled.

User Configuration\Administrative Templates\Microsoft Outlook 2013\Outlook Options\Preferences\Calendar Options\Office.com Sharing Service\Restrict upload method

Impact:

Enabling this setting could cause disruptions for users who publish their calendars to the Microsoft Office Outlook Calendar Sharing Service. These users will have to use the Single Upload option to manually update their calendars. If users do not publish regularly, their online calendars could become significantly out of date.

See Also

https://workbench.cisecurity.org/files/552

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-20

Plugin: Windows

Control ID: 782d529327c39d9c16aa9263aa0ac020621751a6bb2317d251d0ca06067b0a48