Skip to content
ATO Pathways
  Log In

Microsoft Office 365 ProPlus Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • Macros must be blocked from running in Excel files from the Internet.

    &lt;VulnDiscussion&gt;This policy setting allows you to block macros from running in Office files that come from the Internet. If you enable this ...
    Rule Medium Severity
    Show

  • SRG-APP-000131

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
    Show

  • Untrusted Microsoft Query files must be blocked from opening in Excel.

    &lt;VulnDiscussion&gt;This policy setting controls whether Microsoft Query files (.iqy, oqy, .dqy, and .rqy) in an untrusted location are prevented...
    Rule Medium Severity
    Show

  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
    Show

  • Untrusted database files must be opened in Excel in Protected View mode.

    &lt;VulnDiscussion&gt;This policy setting controls whether database files (.dbf) opened from an untrusted location are always opened in Protected V...
    Rule Medium Severity
    Show

  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
    Show

  • Files from Internet zone must be opened in Excel in Protected View mode.

    &lt;VulnDiscussion&gt;This policy setting allows you to determine if files downloaded from the Internet zone open in Protected View. If you enable...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • Files from unsafe locations must be opened in Excel in Protected View mode.

    &lt;VulnDiscussion&gt;This policy setting lets you determine if files located in unsafe locations will open in Protected View. If you have not spec...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • Files failing file validation must be opened in Excel in Protected view mode and disallow edits.

    &lt;VulnDiscussion&gt;This policy setting controls how Office handles documents when they fail file validation. If you enable this policy setting...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • Outlook must be configured to not run scripts in forms in which the script and the layout are contained within the message.

    &lt;VulnDiscussion&gt;This policy setting controls whether scripts can run in Outlook forms in which the script and layout are contained within the...
    Rule Medium Severity
    Show

  • SRG-APP-000488

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Exchange client authentication with Exchange servers must be enabled to use Kerberos Password Authentication.

    &lt;VulnDiscussion&gt;This policy setting controls which authentication method Outlook uses to authenticate with Microsoft Exchange Server. Note: E...
    Rule Medium Severity
    Show

  • SRG-APP-000575

    <GroupDescription></GroupDescription>
    Group
    Show

  • Outlook must use remote procedure call (RPC) encryption to communicate with Microsoft Exchange servers.

    &lt;VulnDiscussion&gt;This policy setting controls whether Outlook uses remote procedure call (RPC) encryption to communicate with Microsoft Exchan...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules