2.5.10.8.1.2.3 (L1) Ensure 'Prevent publishing to Office.com' is set to 'Enabled'

Information

This policy setting controls whether Outlook users can publish their calendars to the Office.com Calendar Sharing Service.

The recommended state for this setting is: Enabled

When users publish their calendars to Office.com, it shares calendar and availability information with other people outside of the organization. If a calendar is visible to everyone on Office.com or third-party DAV servers, sensitive information contained in calendar appointments might be revealed.

Solution

To establish the recommended state via configuration profiles, set the following Settings Catalog path to Enabled :

Microsoft Outlook 2016\Outlook Options\Preferences\Calendar Options\Office.com Sharing Service\Prevent publishing to Office.com

Impact:

This setting could cause disruptions for Outlook users who publish their calendar data to Microsoft Office.com.

See Also

https://workbench.cisecurity.org/benchmarks/15808

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7

Plugin: Windows

Control ID: 3243c95ae249e3ff15107a8fe2e331a1881111778ebcd0f0c8e7f1a17ae8d19d