Documents must be configured to not open as Read Write when browsing.
An XCCDF Rule
Description
Office document on a Web server using Internet Explorer, the appropriate application opens the file in read-only mode. However, if the default configuration is changed, the document is opened as read/write. Users could potentially make changes to documents and resave them in situations where the Web server security is not configured to prevent such changes.
| Property | Value |
|---|---|
| Responsibility | System Administrator |
- ID
- SV-33480r1_rule
- Version
- DTOO179 - Office System
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2010 -> Tools \ Options \ General \ Web Options... -> Files “Open Office documents as read/write while browsing” to “Disabled”.