Microsoft Office System 2013 Security Technical Implementation Guide

The Microsoft Office System 2013 Security Technical Implementation Guide (V2 R1) has 47 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

47STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

ArchivedPublished Fri Oct 23 2020

The ability to sign into Office365 must be disabled.

Microsoft Office System 2013 Security Technical Implementation Guide

Assessment Title

Rule Text

The ability to sign into Office365 must be disabled.

Description

Discussion Text

Office 2013 can be configured to prompt users for credentials to Office365 using either their Microsoft Account or the user ID assigned by an organization for accessing Office 365. Access to Office 365 will not be permitted and only locally installed and configured Office installations will be used.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-228535

Rule

SV-228535r508020_rule

Severity

medium

Rule Version

DTOO405

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Miscellaneous >> "Block signing into Office" is set to "Enabled: org ID only".

Use the Windows Registry Editor to navigate to the following HKCU\Software\Policies\Microsoft\Office\15.0\common\signin

If the value 'signinoptions' is REG_DWORD = 2, this is not a finding.

Implementation Procedure

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2013 -> Miscellaneous -> "Block signing into Office" to "Enabled: org ID only".

STIG check 20 of 47 in the Microsoft Office System 2013 STIG checklist

← Previous · V-228534The first-run prompt to sign into Office365 must be disabled.Next · V-228536 →The ability to automatically hyperlink screenshots within Word, PowerPoint, Excel and Outlook must be disabled.