1.1.5.1 Ensure 'Automatically download attachments' is set to Disabled

Information

This policy setting controls whether Outlook downloads files attached to Internet Calendar appointments.
If you enable this policy setting, Outlook automatically downloads all Internet Calendar appointment attachments
If you disable or do not configure this policy setting, Outlook does not download attachments when retrieving Internet Calendar appointments. The recommended state for this setting is: Disabled.

Rationale:

Files attached to Internet Calendar appointments could contain malicious code that could be used to compromise a computer.
By default, Outlook does not download attachments when retrieving Internet Calendar appointments.

Solution

To implement the recommended configuration state, set the following Group Policy setting to Disabled.

User Configuration\Administrative Templates\Microsoft Outlook 2016\Account Settings\Internet Calendars\Automatically download attachments

Impact:

Disabling this setting enforces the default configuration in Outlook, and therefore is unlikely to cause usability issues for most users.

See Also

https://workbench.cisecurity.org/files/553

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(3)

Plugin: Windows

Control ID: 3feeabc1377f8f10c3dd9321e8a34bce047873d65afe2932277c72a9262bc1de