II - Mission Support Public
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000207
Group -
Links that invoke instances of Internet Explorer from within an Office product must be blocked.
The Pop-up Blocker feature in Internet Explorer can be used to block most unwanted pop-up and pop-under windows from appearing. This functionality can be controlled separately for instances of Inte...Rule Medium Severity -
SRG-APP-000131
Group -
Trust Bar Notifications for unsigned application add-ins must be blocked.
This policy setting controls whether the specified Office application notifies users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy ...Rule Medium Severity -
SRG-APP-000209
Group -
File Downloads must be configured for proper restrictions.
Disabling this setting allows websites to present file download prompts via code without the user specifically initiating the download. User preferences may also allow the download to occur without...Rule Medium Severity -
SRG-APP-000210
Group -
All automatic loading from trusted locations must be disabled.
This policy setting allows administrators to disable all trusted locations in the specified applications. Trusted locations specified in the Trust Center are used to define file locations that are ...Rule Medium Severity -
SRG-APP-000210
Group -
Disallowance of trusted locations on the network must be enforced.
This policy setting controls whether trusted locations on the network can be used. If you enable this policy setting, users can specify trusted locations on network shares or in other remote locati...Rule Medium Severity -
SRG-APP-000141
Group -
The Save commands default file format must be configured.
This policy setting determines the default file format for saving files in Word. If you enable this policy setting, you can set the default file format from among the following options: - Word Docu...Rule Medium Severity -
SRG-APP-000210
Group -
Force encrypted macros to be scanned in open XML documents must be determined and configured.
This policy setting controls whether encrypted macros in Open XML documents be are required to be scanned with anti-virus software before being opened. If you enable this policy setting, you may ch...Rule Medium Severity -
SRG-APP-000141
Group -
Trust access for VBA must be disallowed.
This policy setting controls whether automation clients such as Microsoft Visual Studio 2005 Tools for Microsoft Office (VSTO) can access the Visual Basic for Applications project system in the spe...Rule Medium Severity -
SRG-APP-000112
Group -
Protection from zone elevation must be enforced.
Internet Explorer places restrictions on each web page users can use the browser to open. Web pages on a user's local computer have the fewest security restrictions and reside in the Local Machine ...Rule Medium Severity -
SRG-APP-000488
Group -
ActiveX Installs must be configured for proper restriction.
Microsoft ActiveX controls allow unmanaged, unprotected code to run on the user computers. ActiveX controls do not run within a protected container in the browser like the other types of HTML or Mi...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.