Ensure 'Do Not Open Files From The Internet Zone in Protected View' is set to Disabled


This policy setting allows you to determine if files downloaded from the Internet zone open in Protected View. The recommended state for this setting is: Disabled. Enabling this setting allows files that users download from the Internet zone open outside of Protected View. This could allow malicious code to become active on user computers or the network.


To implement the recommended configuration state, set the following Group Policy setting to Disabled. User Configuration\Administrative Templates\Microsoft Excel 2013\Excel Options\Security\Trust Center\Protected View\Do Not Open Files From The Internet Zone in Protected View Impact: When files open in Protected View, some functionality will be unavailable and productivity in your organization could be affected. When this is undesirable, users will have to add sites to their trusted sites list in Internet Explorer, thus allowing the files to be opened in normal view with all functionality available.

See Also


Item Details


References: 800-53|SC-18(4)

Plugin: Windows

Control ID: 1a13836bdfbea6aead917aec27dfdc29e5e5db9528c0a6a8ddeef5000eb57cba