Skip to content
Log In

Microsoft Outlook 2013 STIG

Rules, Groups, and Values defined within the XCCDF Benchmark

  • DTOO126 - Add-on Management

    Group
    Show

  • DTOO209 - Zone Elevation Protection

    Group
    Show

  • Protection from zone elevation must be enforced.

    Internet Explorer places restrictions on each web page users can use the browser to open. Web pages on a user's local computer have the fewest security restrictions and reside in the Local Machine ...
    Rule Medium Severity
    Show

  • DTOO211 - Restrict ActiveX Install

    Group
    Show

  • ActiveX installs must be configured for proper restrictions.

    Microsoft ActiveX controls allow unmanaged, unprotected code to run on the user computers. ActiveX controls do not run within a protected container in the browser like the other types of HTML or Mi...
    Rule Medium Severity
    Show

  • DTOO132 - Restrict File Download

    Group
    Show

  • DTOO124 - Scripted Window Security

    Group
    Show

  • Scripted Window Security must be enforced.

    Malicious websites often try to confuse or trick users into giving a site permission to perform an action allowing the site to take control of the users' computers in some manner. Disabling or not ...
    Rule Medium Severity
    Show

  • DTOO313 - Automatically download enclosures

    Group
    Show

  • DTOO314 - Set message format

    Group
    Show

  • Default message format must be set to use Plain Text.

    Outlook uses HTML as the default email format. HTML format poses a security risk by embedding information into the email itself, which could allow for release of sensitive information. If a user at...
    Rule Medium Severity
    Show

  • DTOO315 - Outlook Security settings

    Group
    Show

  • Outlook must be configured not to prompt users to choose security settings if default settings fail.

    This policy prompts the user to choose security settings if default settings fail, but allowing users to select their own security settings would result in inconsistent enforcement in the organizat...
    Rule Medium Severity
    Show

  • DTOO316 - Minimum encryption settings

    Group
    Show

  • DTOO317 - Signed/encrypted messages

    Group
    Show

  • Replies or forwards to signed/encrypted messages must be signed/encrypted.

    This setting controls whether replies and forwards to signed/encrypted mail should also be signed/encrypted.
    Rule Medium Severity
    Show

  • DTOO320 - Check e-mail address against certificate

    Group
    Show

  • Check e-mail addresses against addresses of certificates being used must be disallowed.

    This policy setting controls whether Outlook verifies the user's email address with the address associated with the certificate used for signing.
    Rule Medium Severity
    Show

  • DTOO424 - Disable weather bar in Outlook

    Group
    Show

  • The use of the weather bar in Outlook must be disabled

    The Weather Bar in Outlook displays weather conditions and forecast for a geographic location. By default, Outlook uses weather data provided by MSN Weather. The Weather Bar supports third-party we...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules