Detections
Analytics

1.78 O365-OU-000010

Information

The Publish to Global Address List (GAL) button must be disabled in Outlook.

GROUP ID: V-223355
RULE ID: SV-223355r961863

This policy setting controls whether Outlook users can publish e-mail certificates to the Global Address List (GAL).

If you enable this policy setting, the 'Publish to GAL' button does not display in the 'E-mail Security' section of the Trust Center.

If you disable or do not configure this policy setting, Outlook users can publish their e-mail certificates to the GAL through the 'E-mail Security' section of the Trust Center.

Solution

Set the policy value for

User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Cryptography >> Do not display 'Publish to GAL' button

to 'Enabled'.

See Also

https://workbench.cisecurity.org/benchmarks/26066

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-223355r961863_rule, STIG-ID|O365-OU-000010, Vuln-ID|V-223355

Plugin: Windows

Control ID: 684207c2b2be64a3e1769e00527cbfe1b835a73084cf53dc78b7b4c171d9ece5