Document behavior if file validation fails must be set.
An XCCDF Rule
Description
<VulnDiscussion>This policy key controls the behavior of how Office documents should be handled when failing File Validation. The options available are: -Block files completely. This will prevent users from opening files. -Open files in Protected View and disallow edit. This will prevent users from editing the files. -Open files in Protected view and allow edit. This will allow users to edit the files. If disabling or not configuring this policy setting, the default setting will be, "open files in protected view and allow edit". </VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility>System Administrator</Responsibility><Responsibility>Information Assurance Officer</Responsibility><IAControls></IAControls>
- ID
- SV-33868r1_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Word 2010 -> Word Options -> Security -> Trust Center -> Protected View “Set document behavior if file validation fails” to "Enabled: Open in Protected View" and Unchecked for "Do not allow edit".