No profile (default benchmark)
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000141
Group -
Internet calendar integration in Outlook must be disabled.
This policy setting allows the user to determine whether or not to include Internet Calendar integration in Outlook. The Internet Calendar feature in Outlook enables users to publish calendars onli...Rule Medium Severity -
SRG-APP-000141
Group -
User Entries to Server List must be disallowed.
This policy setting controls whether Outlook users can add entries to the list of SharePoint servers when establishing a meeting workspace. If you enable this policy setting, you can choose between...Rule Medium Severity -
SRG-APP-000141
Group -
Automatically downloading enclosures on RSS must be disallowed.
This policy setting allows you to control whether Outlook automatically downloads enclosures on RSS items. If you enable this policy setting, Outlook will automatically download enclosures on RSS i...Rule Medium Severity -
SRG-APP-000516
Group -
Outlook must be configured not to prompt users to choose security settings if default settings fail.
Check to prompt the user to choose security settings if default settings fail; uncheck to automatically select.Rule Medium Severity -
SRG-APP-000514
Group -
Outlook minimum encryption key length settings must be set.
This policy setting allows you to set the minimum key length for an encrypted e-mail message. If you enable this policy setting, you may set the minimum key length for an encrypted e-mail message. ...Rule Medium Severity -
SRG-APP-000516
Group -
Replies or forwards to signed/encrypted messages must be signed/encrypted.
This policy setting controls whether replies and forwards to signed/encrypted mail should also be signed/encrypted. If you enable this policy setting, signing/encryption will be turned on when repl...Rule Medium Severity -
SRG-APP-000516
Group -
Check e-mail addresses against addresses of certificates being used must be disallowed.
This policy setting controls whether Outlook verifies the user's e-mail address with the address associated with the certificate used for signing. If you enable this policy setting, users can send ...Rule Medium Severity -
SRG-APP-000516
Group -
Read EMail as plain text must be enforced.
Outlook can display email messages and other items in three formats: plain text, Rich Text Format (RTF), and HTML. By default, Outlook displays email messages in whatever format they were received.Rule Medium Severity -
SRG-APP-000516
Group -
Read signed email as plain text must be enforced.
Outlook can display email messages and other items in three formats: plain text, Rich Text Format (RTF), and HTML. By default, Outlook displays digitally signed email messages in the format which t...Rule Medium Severity -
SRG-APP-000516
Group -
The default message format must be set to use Plain Text.
Outlook uses HTML as the default email format. HTML format poses a security risk by embedding information into the email itself, which could allow for release of sensitive information. If a user at...Rule Medium Severity -
SRG-APP-000516
Group -
Outlook Rich Text options must be set for converting to plain text format.
Outlook automatically converts Rich Text Format (RTF) messages that are sent over the internet to HTML format, so that the message formatting is maintained and attachments are received. This settin...Rule Medium Severity -
SRG-APP-000516
Group -
Text in Outlook that represents internet and network paths must not be automatically turned into hyperlinks.
The ability of Outlook to automatically turn text that represents internet and network paths into hyperlinks would allow users to click on those hyperlinks in an email message and access malicious ...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.