1.6.6.7 Ensure 'Unblock Automatic Download of Linked Images' is set to Disabled

Information

This policy setting determines whether PowerPoint automatically downloads links from external sources. The recommended state for this setting is: Disabled. When users insert images into PowerPoint presentations, they can select Link to File instead of Insert. If they do so, the image is represented by a link to a file on disk instead of being embedded in the presentation file itself. By default, when PowerPoint opens a presentation it does not display any linked images saved on a different computer unless the presentation itself is saved in a trusted location (as configured in the Trust Center). If this configuration is changed, PowerPoint will load any images that were saved in remote locations, which presents a security risk.

Solution

To implement the recommended configuration state, set the following Group Policy setting to Disabled. User Configuration\Administrative Templates\Microsoft PowerPoint 2016\PowerPoint Options\Security\Unblock Automatic Download of Linked Images Impact: Disabling this setting enforces the default configuration of PowerPoint, and is therefore unlikely to cause significant usability issues for most users.

See Also

https://workbench.cisecurity.org/files/573

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(3)

Plugin: Windows

Control ID: 3eca1fcd8974f792e899e93e2dd6f4d2c775b379c8d47f7551ce9769225a8c6f