Skip to content
ATO Pathways
  Log In

Microsoft Office System 2010 STIG

Rules, Groups, and Values defined within the XCCDF Benchmark

  • DTOO196 - Mix of Policy and User Locations

    <GroupDescription></GroupDescription>
    Group
    Show

  • A mix of policy and user locations for Office Products must be disallowed.

    &lt;VulnDiscussion&gt;When Microsoft Office files are opened from trusted locations, all the content in the files is enabled and active. Users are ...
    Rule Medium Severity
    Show

  • DTOO212 - Control Blogging

    <GroupDescription></GroupDescription>
    Group
    Show

  • Blogging entries created from inside Office products must be configured for Sharepoint only.

    &lt;VulnDiscussion&gt;The blogging feature in Office products enables users to compose blog entries and post them to their blogs directly from Offi...
    Rule Medium Severity
    Show

  • DTOO200 - Allow users to read with browsers

    <GroupDescription></GroupDescription>
    Group
    Show

  • Office must be configured to not allow read with browsers.

    &lt;VulnDiscussion&gt;The Windows Rights Management Add-on for Internet Explorer provides a way for users who do not use the 2010 Office release to...
    Rule Medium Severity
    Show

  • DTOO177-Disable Updates from Office Online Site

    <GroupDescription></GroupDescription>
    Group
    Show

  • Access to updates, add-ins, and patches on Office.com must be disabled.

    &lt;VulnDiscussion&gt;Having access to updates, add-ins, and patches on the Office Online Web site can help users ensure computers are up to date a...
    Rule Medium Severity
    Show

  • DTOO186 - Trust Bar Notifications

    <GroupDescription></GroupDescription>
    Group
    Show

  • Trust Bar notifications for Security messages must be enforced.

    &lt;VulnDiscussion&gt;The Message Bar in Office applications is used to identify security issues, such as unsigned macros or potentially unsafe add...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules