1.4.7.2.2.2 Ensure 'Do Not Open Files From The Internet Zone in Protected View' is set to Disabled

Information

This policy setting allows you to determine if files downloaded from the Internet zone open in Protected View. The recommended state for this setting is: Disabled. Enabling this setting allows files that users download from the Internet zone open outside of Protected View. This could allow malicious code to become active on user computers or the network.

Solution

To implement the recommended configuration state, set the following Group Policy setting to Disabled. User Configuration\Administrative Templates\Microsoft Excel 2016\Excel Options\Security\Trust Center\Protected View\Do Not Open Files From The Internet Zone in Protected View Impact: When files open in Protected View, some functionality will be unavailable and productivity in your organization could be affected. When this is undesirable, users will have to add sites to their trusted sites list in Internet Explorer, thus allowing the files to be opened in normal view with all functionality available.

See Also

https://workbench.cisecurity.org/files/569

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(4)

Plugin: Windows

Control ID: 71fdcd47dccf792cd9938a435e7a033db76275ee97512bde6bf07135a8b3b8e6