Microsoft Office 365 ProPlus Security Technical Implementation Guide

The Microsoft Office 365 ProPlus Security Technical Implementation Guide (V3 R4) has 143 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

143STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

ArchivedPublished Wed Oct 01 2025

Additional optional connected experiences must be disabled.

Microsoft Office 365 ProPlus Security Technical Implementation Guide

Assessment Title

Rule Text

Additional optional connected experiences must be disabled.

Description

Discussion Text

These are experiences that use Office content to provide design recommendations, editing suggestions, data insights, and similar features. Examples include PowerPoint Designer and Translator.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-278358

Rule

SV-278358r1130630_rule

Severity

medium

Rule Version

O365-CO-000031

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Privacy >> Trust Center >> "Allow the use of additional optional connected experiences in Office" is set to "Disabled".

Use the Windows Registry Editor to navigate to the following key:
HKCU\software\policies\Microsoft\office\16.0\common\privacy\

If the value "ControllerConnectedServicesEnabled" is "REG_DWORD = 2", this is not a finding. 

If the registry key does not exist or is not configured properly, this is a finding.

Implementation Procedure

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Privacy >> Trust Center >> "Allow the use of additional optional connected experiences in Office" to "Disabled".

STIG check 142 of 143 in the Microsoft Office 365 ProPlus STIG checklist

← Previous · V-278357Connected experiences that download online content must be disabled.Next · V-278359 →Connected experiences must be disabled.