Microsoft InfoPath 2007 Security Technical Implementation Guide

The Microsoft InfoPath 2007 Security Technical Implementation Guide (V4 R13) has 27 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

27STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V4 · R13

CurrentPublished Fri Oct 27 2017

Disable the Information Rights Management feature for InfoPath.

Microsoft InfoPath 2007 Security Technical Implementation Guide

Assessment Title

Rule Text

Disable the Information Rights Management feature for InfoPath.

Description

Discussion Text

By default, users can use Information Rights Management (IRM) in InfoPath 2007 to create forms that have restricted permission for specific people who will access the form. By using IRM, users can help prevent sensitive information from being printed, forwarded, or copied by unauthorized people.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-17646

Rule

SV-18793r1_rule

Severity

medium

Rule Version

DTOO174 - InfoPath

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

The policy value for User Configuration -> Administrative Templates -> Microsoft Office InfoPath 2007 -> Restricted Features "Information Rights Management" will be set to "Disabled".

Procedure:  Use the Windows Registry Editor to navigate to the following key: 

HKCU\Software\Policies\Microsoft\Office\12.0\InfoPath\Designer\RestrictedFeatures

Criteria: If the value IRMAllowed is REG_DWORD = 1, this is not a finding.

Implementation Procedure

Fix Text

The policy value for User Configuration -> Administrative Templates -> Microsoft Office InfoPath 2007 -> Restricted Features "Information Rights Management" will be set to "Disabled".

STIG check 14 of 27 in the Microsoft InfoPath 2007 STIG checklist

← Previous · V-17611Email with InfoPath forms to show UI to recipients.Next · V-17654 →Disable dynamic caching of the form template in InfoPath eMail forms.