2.2.4.7.2.2.1 Ensure 'dBase III /IV files' is set to 'Enable: Open/Save blocked, use open policy'

Information

This policy setting determines whether users can open, view, edit, or save Excel files with dBase III /IV files format.

Open/Save blocked, use open policy: Both opening and saving of the file type will be blocked. The file will open based on the policy setting configured in the 'default file block behavior' key.

NOTE: Use Open Policy action is defined by the Set default file block behavior group policy setting which is included in this benchmark.

The recommended state for this setting is: Enabled: Open/Save blocked, use open policy.

Rationale:

Using legacy file formats could allow malicious code to become active on a user's computer or the network.

Impact:

Users will not be able to open, save, or view dBase III /IV files.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled: Open/Save blocked, use open policy.

User Configuration\Administrative Templates\Microsoft Excel 2016\Excel Options\Security\Trust Center\File Block Settings\dBase III /IV Files

Default Value:

Disabled. (The file type will not be blocked.)

See Also

https://workbench.cisecurity.org/benchmarks/12129

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-3c.2.

Plugin: Windows

Control ID: 93a53c3f43a4bb5d6c0a8e501e9645e3d9909ccb03c9b614e4d35847a21acbe4