The Publish to Global Address List (GAL) button must be disabled in Outlook.
An XCCDF Rule
Description
This policy setting controls whether Outlook users can publish e-mail certificates to the Global Address List (GAL). If you enable this policy setting, the "Publish to GAL" button does not display in the "E-mail Security" section of the Trust Center. If you disable or do not configure this policy setting, Outlook users can publish their e-mail certificates to the GAL through the "E-mail Security" section of the Trust Center.
- ID
- SV-223355r961863_rule
- Version
- O365-OU-000010
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Cryptography >> Do not display 'Publish to GAL' button to "Enabled".