Detections
Analytics
DTOO234 - ActiveX One-Off forms must be configured.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
Third-party ActiveX controls are not allowed to run in one-off forms in Outlook. This behavior can be changed so that Safe Controls (Microsoft Forms 2.0 controls and the Outlook Recipient and Body controls) are allowed in one-off forms, or so that all ActiveX controls are allowed to run.Solution
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Outlook 2013 -> Security 'Allow Active X One Off Forms' to 'Enabled: Load only Outlook Controls'.See Also
https://iasecontent.disa.mil/stigs/zip/U_MS_Outlook_2013_V1R13_STIG.zip
Item Details
Audit Name: DISA STIG Microsoft Outlook 2013 v1r13
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-18(4), CAT|II, CCI|CCI-001170, Rule-ID|SV-53915r1_rule, STIG-ID|DTOO234, Vuln-ID|V-17559
Plugin: Windows
Control ID: 1cd28d24627c8e2e38c7668ec0db848daee5b2950560d91176e49eef99bf0419