2.6.6.6.6 Ensure 'Turn off file validation' is set to 'Disabled'

Information

This policy setting controls the file validation feature. Office File Validation is a feature that performs security checks on files. If Office File Validation detects a problem with a file, the file cannot be opened.

The recommended state for this setting is: Disabled.

Rationale:

The file validation feature ensures that Office Binary Documents (97-2003) are checked to see if they conform against the file format schema before they are opened, which may help protect against certain types of attacks.

Impact:

None - this is the default behavior.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled.

User Configuration\Administrative Templates\Microsoft PowerPoint 2016\PowerPoint Options\Security\Turn off file validation

Default Value:

Disabled. (File validation feature is on.)

See Also

https://workbench.cisecurity.org/benchmarks/12129

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-16

Plugin: Windows

Control ID: e5f89152d6c4c11f40bc9bcf2d4f6dc5f8c8c28be574ddccde725ed54187b061