2.11.8.7.2.2.5 Ensure 'Turn off Protected View for attachments opened from Outlook' is set to 'Disabled'

Information

This policy setting determines if Word files in Outlook attachments open in Protected View.

The recommended state for this setting is: Disabled.

Rationale:

Opening files that do not require Protected View could lead to malicious code executing on a user's computer or the network.

Impact:

Some functionality is not available when files are opened in Protected View. Users will be unable to edit documents.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled.

User Configuration\Administrative Templates\Microsoft Word 2016\Word Options\Security\Trust Center\Protected View\Turn Off Protected View for Attachments Opened From Outlook

Default Value:

Disabled. (Outlook attachments open in Protected View.)

See Also

https://workbench.cisecurity.org/benchmarks/12129

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(4)

Plugin: Windows

Control ID: 96300c96d8b1d4d1e476fd0866d1b4b8f1fc46f138f1f1476c9b0a20dc94a4df