Skip to content

Microsoft Office 365 ProPlus Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Dynamic Data Exchange (DDE) server launch in Excel must be blocked.

    <VulnDiscussion>This policy setting allows you to control whether Dynamic Data Exchange (DDE) server launch is allowed. By default, DDE serv...
    Rule Medium Severity
  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
  • Dynamic Data Exchange (DDE) server lookup in Excel must be blocked.

    &lt;VulnDiscussion&gt;This policy setting allows you to control whether Dynamic Data Exchange (DDE) server lookup is allowed. By default, DDE serv...
    Rule Medium Severity
  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
  • Open/save of dBase III / IV format files must be blocked.

    &lt;VulnDiscussion&gt;This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified...
    Rule Medium Severity
  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
  • Open/save of Dif and Sylk format files must be blocked.

    &lt;VulnDiscussion&gt;This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified...
    Rule Medium Severity
  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
  • Open/save of Excel 2 macrosheets and add-in files must be blocked.

    &lt;VulnDiscussion&gt;This policy setting allows you to determine whether users can open, view, edit, or save Excel files with the format specified...
    Rule Medium Severity
  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules