II - Mission Support Sensitive
Rules and Groups employed by this XCCDF Profile
-
DTOO146-Disable Trust access to VB Project Macros
Group -
Trust access for VBA must be disallowed.
VSTO projects require access to the Visual Basic for Applications project system in Excel, PowerPoint, and Word, even though the projects do not use Visual Basic for Applications. Design-time suppo...Rule Medium Severity -
DTOO304 - VBA Macro Warning settings
Group -
Warning Bar settings for VBA macros must be configured.
When users open files containing VBA macros, applications open the files with the macros disabled and displays the Trust Bar with a warning that macros are present and have been disabled. Users may...Rule Medium Severity -
DTOO143 - Force File Extension to match type
Group -
File types must be configured to provide mismatch warnings
Excel can load files with extensions that do not match the files' type. For example, if a comma-separated values (CSV) file named example.csv is renamed example.xls, Excel can properly load it as a...Rule Medium Severity -
DTOO138 - Internet and Network Path hyperlinks
Group -
Internet links and Network UNCs created as embedded hyperlinks must be prevented.
When users type a string of characters, Excel recognizes as a Uniform Resource Locator (URL) or Uniform Naming Convention (UNC) path to a resource on the Internet or a local network, Excel will tra...Rule Medium Severity -
DTOO140 - Disable AutoRepublish
Group -
Automatic republish to web pages must be disallowed.
If users choose to publish Excel data to a static web page and enable the AutoRepublish feature, Excel saves a copy of the data to the web page every time the user saves the workbook. If the page i...Rule Medium Severity -
DTOO150 - Automatic Link Updates
Group -
The Update of automatic links setting must be configured to prompt user before allowing links to be updated.
If an Excel workbook contains links to other documents and users are not prompted to approve them, the contents of the workbook might change without the users' knowledge because the linked files ha...Rule Medium Severity -
DTOO141 - AutoRepublish Warning Alert
Group -
The AutoRepublish warning alert must be provided.
AutoRepublish is a feature in Excel allowing workbooks to be automatically republished to the World Wide Web each time the workbook is saved. A number of changes might need to be made to allow the ...Rule Medium Severity -
DTOO152 - Load pics from Web not in Excel
Group -
The loading of images from web pages must not be allowed.
When users open web pages in Excel, Excel loads any graphics included in the pages, regardless of whether or not they were originally created in Excel. Allowing Excel to load graphics created in ot...Rule Medium Severity -
DTOO145 - Store macro in workbook
Group -
Macro storage must be in personal macro workbooks.
The Record Macro dialog box includes a drop-down menu allowing users to choose whether to store the new macro in the current workbook, a new workbook, or their personal macro workbook (Personal.xls...Rule Medium Severity -
DTOO126 - Add-on Management
Group -
Add-on Management functionality must be allowed.
Internet Explorer add-ons are pieces of code, run in Internet Explorer, to provide additional functionality. Rogue add-ons may contain viruses or other malicious code. Disabling or not configuring ...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.