What changed in Microsoft Groove 2013 STIG V1R4V1R4 changes

Microsoft Groove 2013 STIG V1R4 (2025-01-30) replaced V1R3 (2018-04-27): 11 checks added, 10 removed. It has 11 checks, against 10 in V1R3.

V1R4 checklistV1R3 checklist Compare V1R3 and V1R4 in STIG Compare

  • 11 added
  • 10 removed
  • 0 updated

Added in V1R4 (11)

  • V-242470CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-242471CAT IIThe Internet Explorer Bind to Object functionality must be enabled.
  • V-242472CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing.
  • V-242473CAT IINavigation to URLs embedded in Office products must be blocked.
  • V-242474CAT IIScripted Window Security must be enforced.
  • V-242475CAT IIAdd-on Management functionality must be allowed.
  • V-242476CAT IILinks that invoke instances of IE from within an Office product must be blocked.
  • V-242477CAT IIFile downloads must be configured for proper restrictions.
  • V-242478CAT IIProtection from zone elevation must be enforced.
  • V-242479CAT IIActiveX installs must be configured for proper restrictions.
  • V-270897CAT IThe version of Groove running on the system must be a supported version.

Removed since V1R3 (10)

  • V-40766CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-40767CAT IIThe Internet Explorer Bind to Object functionality must be enabled.
  • V-40768CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing.
  • V-40769CAT IINavigation to URLs embedded in Office products must be blocked.
  • V-40770CAT IIScripted Window Security must be enforced.
  • V-40771CAT IIAdd-on Management functionality must be allowed.
  • V-40772CAT IILinks that invoke instances of IE from within an Office product must be blocked.
  • V-40773CAT IIFile downloads must be configured for proper restrictions.
  • V-40774CAT IIProtection from zone elevation must be enforced.
  • V-40775CAT IIActiveX installs must be configured for proper restrictions.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R4 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.