2.2.4.7.2.3.4 Ensure 'Set document behavior if file validation fails' is set to 'Enabled: Open in Protected View'

Information

This policy setting controls how Office handles documents when they fail file validation.

Office File Validation is a feature that performs security checks on files. If Office File Validation detects a problem with a file, the file cannot be opened.

The recommended state for this setting is: Enabled: Open in Protected View.

Rationale:

Files that have failed file validation outside of Protected View could allow malicious code to execute on the system or the network.

Impact:

Files that are blocked by the validation fail rule will not open on a user's computer.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled: Open in Protected View.

User Configuration\Administrative Templates\Microsoft Excel 2016\Excel Options\Security\Trust Center\Protected View\Set document behavior if file validation fails

Default Value:

Enabled. (Open in Protected View (Unchecked).)

Additional Information:

If this policy setting is disabled, Office follows the 'Open files in Protected View and disallow edit' behavior.

See Also

https://workbench.cisecurity.org/benchmarks/12129

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(4)

Plugin: Windows

Control ID: 91664837a111c84786d47ee938193015586151c1b62856164623a1876f4e9035