Microsoft Office 365 ProPlus Security Technical Implementation Guide

The Microsoft Office 365 ProPlus Security Technical Implementation Guide (V3 R5) has 139 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

139STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R5

CurrentPublished Wed Apr 01 2026

Files dragged from an Outlook e-mail to the file system must be created in ANSI format.

Microsoft Office 365 ProPlus Security Technical Implementation Guide

Assessment Title

Rule Text

Files dragged from an Outlook e-mail to the file system must be created in ANSI format.

Description

Discussion Text

This policy setting controls whether e-mail messages dragged from Outlook to the file system are saved in Unicode or ANSI format.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-223350

Rule

SV-223350r961863_rule

Severity

medium

Rule Version

O365-OU-000005

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Use Unicode format when dragging e-mail message to file system is set to "Disabled".

Use the Windows Registry to navigate to the following key:

HKCU\software\policies\microsoft\office\16.0\outlook\options\general

If the value for msgformat is set to REG_DWORD = 0, this is not a finding.

Implementation Procedure

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Use Unicode format when dragging e-mail message to file system to "Disabled".

STIG check 70 of 139 in the Microsoft Office 365 ProPlus STIG checklist

← Previous · V-223349Scripts associated with shared folders must be prevented from execution in Outlook.Next · V-223351 →The junk email protection level must be set to No Automatic Filtering.