DTOO110 - Blocking as default file block opening behavior must be enforced.

Information

Users can open, view, or edit a large number of file types in Office 2013. Some file types are safer than others, as some could allow malicious code to become active on user computers or the network. For this reason, disabling or not configuring this setting could allow malicious code to become active on user computers or the network.

Solution

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2013 -> Excel Options -> Security -> Trust Center -> File Block Settings 'Set default file block behavior' to 'Enabled: Blocked files are not opened'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Excel_2013_V1R8_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(1), CAT|II, CCI|CCI-001662, Rule-ID|SV-242335r961086_rule, STIG-ID|DTOO110, STIG-Legacy|SV-53617, STIG-Legacy|V-26612, Vuln-ID|V-242335

Plugin: Windows

Control ID: 3cdc8d01839cba1531ad27440549a20bf98699c4b9360d6a22cb9b5a03f2ec9e