2.5.1.5.1 (L1) Ensure 'Automatically download attachments' is set to 'Disabled'

Information

This policy setting controls whether Outlook downloads files attached to Internet Calendar appointments.

The recommended state for this setting is: Disabled

Files attached to Internet Calendar appointments could contain malicious code that could be used to compromise a computer. By default, Outlook does not download attachments when retrieving Internet Calendar appointments.

Solution

To establish the recommended state via configuration profiles, set the following Settings Catalog path to Disabled :

Microsoft Outlook 2016\Account Settings\Internet Calendars\Automatically download attachments

Impact:

Disabling this setting enforces the default configuration in Outlook, and therefore is unlikely to cause usability issues for most users.

See Also

https://workbench.cisecurity.org/benchmarks/15808

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-3, 800-53|SI-8

Plugin: Windows

Control ID: c25225d585325c854e4efce194bf8934f44a9dd6f312fd9d0fb502a0fe0f7959