Free DISA STIG and SRG Library | Vaulted
Removed

V-223349

Scripts associated with shared folders must be prevented from execution in Outlook.

Finding ID
O365-OU-000004
Rule ID
SV-223349r508019_rule
Severity
Cat II
CCE
(None)
Group Title
SRG-APP-000210
CCI
CCI-001170
Target Key
(None)
Documentable
No
Discussion

This policy setting controls whether Outlook executes scripts associated with custom forms or folder home pages for shared folders.

Fix Text

Set the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for shared folders to "Enabled".

Check Content

Verify the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for shared folders is set to "Enabled". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for sharedfolderscript is set to REG_DWORD = 1, this is not a finding.