Microsoft PowerPoint 2010 STIG
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Force encrypted macros to be scanned in open XML documents must be determined and configured.
<VulnDiscussion>When an Office Open XML document (Word, Excel, and PowerPoint) is rights-managed, or password-protected, any macros embedded ...Rule Medium Severity -
DTOO134 - Trusted locations on computer
<GroupDescription></GroupDescription>Group -
Disallowance of Trusted Locations on the network must be enforced.
<VulnDiscussion>Files located in Trusted Locations and specified in the Trust Center are assumed to be safe. Content, code, and add-ins are a...Rule Medium Severity -
DTOO139 - Save files default format
<GroupDescription></GroupDescription>Group -
Save files default format must be configured.
<VulnDiscussion>When users create new PowerPoint files, PowerPoint 2010 saves them in the new *.pptx format. Ensure this setting is enabled ...Rule Medium Severity -
DTOO146-Disable Trust access to VB Project Macros
<GroupDescription></GroupDescription>Group -
Trust access for VBA must be disallowed.
<VulnDiscussion>VSTO projects require access to the Visual Basic for Applications project system in Excel, PowerPoint, and Word, even though ...Rule Medium Severity -
DTOO304 - VBA Macro Warning settings
<GroupDescription></GroupDescription>Group -
Warning Bar settings for VBA macros must be configured.
<VulnDiscussion>When users open files containing VBA Macros, applications open the files with the macros disabled and displays the Trust Bar ...Rule Medium Severity -
DTOO290 - Make Hidden marks visible in PowerPoint
<GroupDescription></GroupDescription>Group -
Hidden markup options must be visible.
<VulnDiscussion>PowerPoint presentations that are saved in standard or HTML format can contain a flag indicating whether markup (comments or ...Rule Medium Severity -
Automatic download of linked images must be disallowed.
<VulnDiscussion>When users insert images into PowerPoint presentations, they can select Link to File instead of Insert. If they do so, the im...Rule Medium Severity -
DTOO126 - Add-on Management
<GroupDescription></GroupDescription>Group -
Add-on Management functionality must be allowed.
<VulnDiscussion>Internet Explorer add-ons are pieces of code, run in Internet Explorer, to provide additional functionality. Rogue add-ons ma...Rule Medium Severity -
DTOO209 - Zone Elevation Protection
<GroupDescription></GroupDescription>Group -
Protection from zone elevation must be enforced.
<VulnDiscussion>Internet Explorer places restrictions on each web page users can use the browser to open. Web pages on a user's local compute...Rule Medium Severity -
DTOO211 - Restrict ActiveX Install
<GroupDescription></GroupDescription>Group -
ActiveX Installs must be configured for proper restriction.
<VulnDiscussion>Microsoft ActiveX controls allow unmanaged, unprotected code to run on the user computers. ActiveX controls do not run within...Rule Medium Severity -
DTOO132 - Restrict File Download
<GroupDescription></GroupDescription>Group -
File Downloads must be configured for proper restrictions.
<VulnDiscussion>Disabling this setting allows websites to present file download prompts via code without the user specifically initiating the...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.