Detections
Analytics

1.7 O365-CO-000004

Information

Custom user interface (UI) code must be blocked from loading in all Office applications.

GROUP ID: V-223287
RULE ID: SV-223287r961863

This policy setting controls whether Office 365 ProPlus applications load any custom user interface (UI) code included with a document or template. Office 365 ProPlus allows developers to extend the UI with customization code that is included in a document or template.

If this policy setting is enabled, Office 365 ProPlus applications cannot load any UI customization code included with documents and templates.

If this policy setting is not configured or disabled, Office 365 ProPlus applications load any UI customization code included with a document or template when opening it.

Solution

Set the policy value for

User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Global Options >> Customize >> Disable UI extending from documents and templates

to Enabled: Disallow in Word; Excel; PowerPoint; Access; Outlook; Publisher; Project; Visio; InfoPath.

See Also

https://workbench.cisecurity.org/benchmarks/26066

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-223287r961863_rule, STIG-ID|O365-CO-000004, Vuln-ID|V-223287

Plugin: Windows

Control ID: 8d66226039b8123408e103f9ec5dc32c1dd061017adc854947ca9d78c59957c2