2.5.1.5.2 Ensure 'Do not include Internet Calendar integration in Outlook' is set to 'Enabled'

Information

This policy setting controls Internet Calendar integration in Outlook. The Internet Calendar feature in Outlook enables users to publish calendars online (using the webcal:// protocol) and subscribe to calendars that others have published. When users subscribe to an Internet calendar, Outlook queries the calendar at regular intervals and downloads any changes as they are posted.

The recommended state for this setting is: Enabled.

Rationale:

The Internet Calendar feature in Outlook enables users to publish calendars online (using the webcal:// protocol) and subscribe to calendars that others have published. When users subscribe to an Internet calendar, Outlook queries the calendar at regular intervals and downloads any changes as they are posted. By default, Outlook allows users to subscribe to Internet calendars. If the organization has policies that govern the use of external resources such as Internet calendars, this feature might enable users to violate those policies.

Impact:

Enabling this setting can cause disruptions for users who subscribe to Internet calendars from within Outlook. These users will have to use another method to access Internet calendar data.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled:

User Configuration\Administrative Templates\Microsoft Outlook 2016\Account Settings\Internet Calendars\Do not include Internet Calendar integration in Outlook

Default Value:

Disabled. (Outlook allows users to subscribe to Internet calendars.)

See Also

https://workbench.cisecurity.org/benchmarks/12129

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|CM-10, 800-53|CM-11, 800-53|SC-18, 800-53|SI-3, 800-53|SI-8

Plugin: Windows

Control ID: b10b5f31ed705a0c4a379a7cf1d39cf799e9a741892762496d9ddc1f819d77ec