1.9.8.1.2.3 Ensure 'Prevent publishing to Office.com' is set to Enabled

Information

This policy setting controls whether Outlook users can publish their calendars to the Office.com Calendar Sharing Service.
If you enable this policy setting, Outlook users cannot publish their calendars to Office.com.
If you disable do not configure this policy setting, Outlook users can share their calendars with selected others by publishing them to the Microsoft Outlook Calendar Sharing Service. Users can control who can view their calendar and at what level of detail. The recommended state for this setting is: Enabled.

Rationale:

By default, Outlook users can share their calendars with selected others by publishing them to the Microsoft Office Outlook Calendar Sharing Service. Users can control who can view their calendar and at what level of detail. If your organization has policies that govern access to external resources such as Office.com, allowing users to publish their calendars might enable them to violate those policies.

Solution

To implement the recommended configuration state, set the following Group Policy setting to Enabled.

User Configuration\Administrative Templates\Microsoft Outlook 2016\Outlook Options\Preferences\Calendar Options\Office.com Sharing Service\Prevent publishing to Office.com

Impact:

Enabling this setting will cause disruptions for Outlook users who publish their calendar data to Microsoft Office.com. Such users will have to publish their calendar data to a different resource or stop publishing their calendar data. Users who do not publish calendar data will not be affected by this setting.

See Also

https://workbench.cisecurity.org/files/553

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-20

Plugin: Windows

Control ID: 6b6f5f07e55dba1fc3efb97e56d6565e6033b366e922078e5b4f6f682c6a20db