What changed in Microsoft Access 2016 STIG V2R1V2R1 changes

Microsoft Access 2016 STIG V2R1 (2026-01-05) replaced V1R1 (2016-11-14): 17 checks added, 16 removed. It has 17 checks, against 16 in V1R1.

V2R1 checklistV1R1 checklist Compare V1R1 and V2R1 in STIG Compare

  • 17 added
  • 16 removed
  • 0 updated

Added in V2R1 (17)

  • V-238008CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-238009CAT IIEnabling IE Bind to Object functionality must be present.
  • V-238010CAT IISaved from URL mark to assure Internet zone processing must be enforced.
  • V-238011CAT IINavigation to URLs embedded in Office products must be blocked.
  • V-238012CAT IIScripted Window Security must be enforced.
  • V-238013CAT IIAdd-on Management functionality must be allowed.
  • V-238014CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
  • V-238015CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
  • V-238016CAT IIThe configuration for enabling of hyperlinks must be enforced.
  • V-238017CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
  • V-238018CAT IIFile Downloads must be configured for proper restrictions.
  • V-238019CAT IIDatabase functionality configurations must be displayed to the user.
  • V-238020CAT IIThe Save commands default file format must be configured.
  • V-238021CAT IIProtection from zone elevation must be enforced.
  • V-238022CAT IIActiveX Installs must be configured for proper restriction.
  • V-238023CAT IIWarning Bar settings for VBA macros must be configured.
  • V-279941CAT IThe version of Access running on the system must be a supported version.

Removed since V1R1 (16)

  • V-70907CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-70925CAT IIEnabling IE Bind to Object functionality must be present.
  • V-70927CAT IISaved from URL mark to assure Internet zone processing must be enforced.
  • V-70929CAT IINavigation to URLs embedded in Office products must be blocked.
  • V-70931CAT IIScripted Window Security must be enforced.
  • V-70933CAT IIAdd-on Management functionality must be allowed.
  • V-70935CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
  • V-70937CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
  • V-70939CAT IIThe configuration for enabling of hyperlinks must be enforced.
  • V-70941CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
  • V-70943CAT IIFile Downloads must be configured for proper restrictions.
  • V-70945CAT IIDatabase functionality configurations must be displayed to the user.
  • V-70947CAT IIThe Save commands default file format must be configured.
  • V-70949CAT IIProtection from zone elevation must be enforced.
  • V-70951CAT IIActiveX Installs must be configured for proper restriction.
  • V-70953CAT IIWarning Bar settings for VBA macros must be configured.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R1 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.