1.2.1.3 Ensure 'Information Bar' is set to Enabled - exprwd.exe

Information

This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or code installs are restricted. By default, the Information Bar is displayed for Internet Explorer processes. The recommended state for this setting is: Enabled. (Check: groove.exe, excel.exe, mspub.exe, powerpnt.exe, pptview.exe, visio.exe, winproj.exe, outlook.exe, spDesign.exe, exprwd.exe, msaccess.exe, onent.exe, mse7.exe) The information bar can help users to understand when potentially malicious content has been blocked, on the other hand, some users may be confused by the appearance of the bar or unsure how to respond.

Solution

To implement the recommended configuration state, set the following Group Policy setting to Enabled. Computer Configuration\Administrative Templates\Microsoft Office 2016 (Machine)\Security Settings\IE Security\Information Bar Impact: The security bar will be enabled for each of the specified applications.

See Also

https://workbench.cisecurity.org/files/571

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CSCv6|3.1

Plugin: Windows

Control ID: ca58adc5d272e9ce99b38d3436a701254a395bd2ab7d5d7c75e98ae7a2f2b6fa