Microsoft Office System 2010 Security Technical Implementation Guide

The Microsoft Office System 2010 Security Technical Implementation Guide (V1 R13) has 37 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

37STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R13

CurrentPublished Wed Jul 24 2024

Encrypt document properties must be configured for OLE documents.

Microsoft Office System 2010 Security Technical Implementation Guide

Assessment Title

Rule Text

Encrypt document properties must be configured for OLE documents.

Description

Discussion Text

This policy setting allows you configure if the document properties are encrypted. This applies to OLE documents (Office 97-2003 compatible) if the application is configured for CAPI RC4. Disabling this setting will prevent the encryption of document properties, which may expose sensitive data.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-241966

Rule

SV-241966r961602_rule

Severity

medium

Rule Version

DTOO321 - Office System

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

The policy value for User Configuration -> Administrative Templates -> Microsoft Office 2010 -> Security Settings "Encrypt document properties" must be set to "Enabled". 

Procedure: Use the Windows Registry Editor to navigate to the following key: 

HKCU\Software\Policies\Microsoft\Office\14.0\common\security

Criteria: If the value EncryptDocProps is REG_DWORD = 1, this is not a finding.

Implementation Procedure

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2010 -> Security Settings "Encrypt document properties" to "Enabled".

STIG check 36 of 37 in the Microsoft Office System 2010 STIG checklist

← Previous · V-241965Customer-submitted templates downloads from Office.com must be disallowed.Next · V-241967 →Online content options must be configured for offline content availability.