Microsoft Office 365 ProPlus Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000141
<GroupDescription></GroupDescription>Group -
VBA Macros not digitally signed must be blocked in Excel.
<VulnDiscussion>This policy setting controls how the specified applications warn users when Visual Basic for Applications (VBA) macros are pr...Rule Medium Severity -
SRG-APP-000207
<GroupDescription></GroupDescription>Group -
Dynamic Data Exchange (DDE) server launch in Excel must be blocked.
<VulnDiscussion>This policy setting allows you to control whether Dynamic Data Exchange (DDE) server launch is allowed. By default, DDE serv...Rule Medium Severity -
SRG-APP-000207
<GroupDescription></GroupDescription>Group -
Dynamic Data Exchange (DDE) server lookup in Excel must be blocked.
<VulnDiscussion>This policy setting allows you to control whether Dynamic Data Exchange (DDE) server lookup is allowed. By default, DDE serv...Rule Medium Severity -
SRG-APP-000207
<GroupDescription></GroupDescription>Group -
Open/save of dBase III / IV format files must be blocked.
<VulnDiscussion>This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified...Rule Medium Severity -
SRG-APP-000207
<GroupDescription></GroupDescription>Group -
Open/save of Dif and Sylk format files must be blocked.
<VulnDiscussion>This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified...Rule Medium Severity -
SRG-APP-000207
<GroupDescription></GroupDescription>Group -
Open/save of Excel 2 macrosheets and add-in files must be blocked.
<VulnDiscussion>This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified...Rule Medium Severity -
SRG-APP-000207
<GroupDescription></GroupDescription>Group -
Open/save of Excel 2 worksheets must be blocked.
<VulnDiscussion>This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified...Rule Medium Severity -
SRG-APP-000207
<GroupDescription></GroupDescription>Group -
Open/save of Excel 3 macrosheets and add-in files must be blocked.
<VulnDiscussion>This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified...Rule Medium Severity -
SRG-APP-000207
<GroupDescription></GroupDescription>Group -
Extraction options must be blocked when opening corrupt Excel workbooks.
<VulnDiscussion>This policy setting controls whether Excel presents users with a list of data extraction options before beginning an Open and...Rule Medium Severity -
SRG-APP-000210
<GroupDescription></GroupDescription>Group -
Open/save of Excel 3 worksheets must be blocked.
<VulnDiscussion>This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.