Dont allow Dynamic Data Exchange (DDE) server lookup in Excel

Information

This policy setting allows you to control whether Dynamic Data Exchange (DDE) server lookup is allowed.
By default, DDE server lookup is turned on, but users can turn off DDE server lookup by going to File > Options > Trust Center > Trust Center Settings > External Content.
If you enable this policy setting, DDE server lookup isnt allowed, and users cant turn on DDE server lookup in the Trust Center.
Note: If youre using Dynamic Data Exchange (DDE) server launch, which isnt recommended, dont enable this policy setting, because DDE server launch requires DDE server lookup to be on.
If you disable or dont configure this policy setting, DDE server lookup is turned on, but users can turn off DDE server lookup in the Trust Center.
Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.

Solution

Policy Path: Microsoft Excel 2016\Excel Options\Security\Trust Center\External Content
Policy Setting Name: Dont allow Dynamic Data Exchange (DDE) server lookup in Excel

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-365-apps-for-enterprise-v2206/ba-p/3502714

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Windows

Control ID: bc6a9a13aa11d03d7c508995550df0b692f876bd1f3de2230612a38de9e91f53