Detections
Analytics

1.75 O365-OU-000007

Information

Active X One-Off forms must only be enabled to load with Outlook Controls.

GROUP ID: V-223352
RULE ID: SV-223352r961092

By default, third-party ActiveX controls are not allowed to run in one-off forms in Outlook. You can change this behavior so that Safe Controls (Microsoft Forms 2.0 controls and the Outlook Recipient and Body controls) are allowed in one-off forms, or so that all ActiveX controls are allowed to run.

Solution

Set the policy value for

User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Allow Active X One Off Forms to 'Enabled'

'Load only Outlook Controls'.

See Also

https://workbench.cisecurity.org/benchmarks/26066

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(4), CAT|II, CCI|CCI-001170, Rule-ID|SV-223352r961092_rule, STIG-ID|O365-OU-000007, Vuln-ID|V-223352

Plugin: Windows

Control ID: c825e788e3b90ed18a7a1358f47fdee91efc7a78ba9fd512b9d5615287c522ce