1.1.5.2 Ensure 'Hide option to enable or disable updates' is set to 'Enabled'

Information

This policy setting determines if the user interface (UI) options to enable or disable Office automatic updates is visible to users. These options are found in the Product Information area of all Office applications installed via Click-to-Run. This policy setting has no effect on Office applications installed via Windows Installer.

The recommended state for this setting is: Enabled.

Rationale:

Security updates help prevent malicious attacks on Office applications. Timely application of Office updates helps ensure the security of devices and the applications running on the devices. Without these updates, devices and the applications running on those devices are more susceptible to security attacks.

Enabling this policy setting helps prevent users from disabling automatic updates for Office.

Impact:

Office updates for Click-to-Run installations of Microsoft Office are applied in the background and have no adverse affect on users.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled.

Computer Configuration\Administrative Templates\Microsoft Office 2016 (Machine)\Updates\Hide option to enable or disable updates

Default Value:

Disabled. (The Enable Update and Disable Updates options are visible, and users can enable or disable Office automatic updates from the UI.)

See Also

https://workbench.cisecurity.org/benchmarks/12129

Item Details

Category: RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|RA-5, 800-53|SI-2, 800-53|SI-2(2)

Plugin: Windows

Control ID: 36c202e23a7cf73dd5ae244ebccee70ee92ecbbd2b7235aa1195e52e6baf7c31