II - Mission Support Public
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000516
<GroupDescription></GroupDescription>Group -
Publishing to a Web Distributed and Authoring (DAV) server must be prevented.
<VulnDiscussion>This policy setting controls whether Outlook users can publish their calendars to a DAV server. If you enable this policy set...Rule Medium Severity -
SRG-APP-000516
<GroupDescription></GroupDescription>Group -
Level of calendar details that a user can publish must be restricted.
<VulnDiscussion>This policy setting controls the level of calendar details that Outlook users can publish to the Microsoft Outlook Calendar S...Rule Medium Severity -
SRG-APP-000516
<GroupDescription></GroupDescription>Group -
Access restriction settings for published calendars must be configured.
<VulnDiscussion>This policy setting determines what restrictions apply to users who publish their calendars on Office.com or third-party Worl...Rule Medium Severity -
SRG-APP-000210
<GroupDescription></GroupDescription>Group -
Outlook Object Model scripts must be disallowed to run for shared folders.
<VulnDiscussion>This policy setting controls whether Outlook executes scripts associated with custom forms or folder home pages for shared fo...Rule Medium Severity -
SRG-APP-000210
<GroupDescription></GroupDescription>Group -
Outlook Object Model scripts must be disallowed to run for public folders.
<VulnDiscussion>This policy setting controls whether Outlook executes scripts that are associated with custom forms or folder home pages for ...Rule Medium Severity -
SRG-APP-000210
<GroupDescription></GroupDescription>Group -
ActiveX One-Off forms must be configured.
<VulnDiscussion>By default, third-party ActiveX controls are not allowed to run in one-off forms in Outlook. You can change this behavior so ...Rule Medium Severity -
SRG-APP-000210
<GroupDescription></GroupDescription>Group -
The Add-In Trust Level must be configured.
<VulnDiscussion>All installed trusted COM addins can be trusted. Exchange Settings for the addins still override if present and this option ...Rule Medium Severity -
SRG-APP-000400
<GroupDescription></GroupDescription>Group -
The remember password for internet e-mail accounts must be disabled.
<VulnDiscussion>Use this option to hide your user's ability to cache passwords locally in the computer's registry. When configured, this poli...Rule Medium Severity -
SRG-APP-000210
<GroupDescription></GroupDescription>Group -
Users customizing attachment security settings must be prevented.
<VulnDiscussion>This policy setting prevents users from overriding the set of attachments blocked by Outlook. If you enable this policy setti...Rule Medium Severity -
SRG-APP-000516
<GroupDescription></GroupDescription>Group -
Outlook Security Mode must be configured to use Group Policy settings.
<VulnDiscussion>This policy setting controls which set of security settings are enforced in Outlook. If you enable this policy setting, you c...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.