1.6.6.5 Ensure 'Run Programs' is set to Enabled (Disable (Don't Run Any Programs))

Information

This policy setting controls the prompting and activation behavior for the 'Run Programs' option for action buttons in PowerPoint. The recommended state for this setting is: Enabled. (Disable (Don't Run Any Programs)) Action buttons can be used to launch external programs from PowerPoint presentations. If a malicious person adds an action button to a presentation that launches a dangerous program, it could significantly affect the security of a user's computer and data.

Solution

To implement the recommended configuration state, set the following Group Policy setting to Enabled. User Configuration\Administrative Templates\Microsoft PowerPoint 2016\PowerPoint Options\Security\Run Programs Impact: Enabling this setting and configuring the drop-down menu to 'Disable (don't run any programs)' will cause disruptions to users who wish to create or use presentations that launch external programs when action buttons are clicked. These users will have to launch any external programs manually at the appropriate times when delivering presentations.

See Also

https://workbench.cisecurity.org/files/573

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(2)

Plugin: Windows

Control ID: 89a6558bac3f4953d42c6d34bf748c50dff25d53f9fe14a2ff969ce568b102e9