Microsoft Office System 2013 Security Technical Implementation Guide

The Microsoft Office System 2013 Security Technical Implementation Guide (V2 R1) has 47 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

47STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

ArchivedPublished Fri Oct 23 2020

The ability to create an online presentation programmatically must be disabled.

Microsoft Office System 2013 Security Technical Implementation Guide

Assessment Title

Rule Text

The ability to create an online presentation programmatically must be disabled.

Description

Discussion Text

Allowing online presentations to be created programmatically allows for the capability of malicious content to become imbedded in those programmatically created presentations.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-228546

Rule

SV-228546r508020_rule

Severity

medium

Rule Version

DTOO409

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Present Online >> "Restrict programmatic access for creating online presentations in PowerPoint and Word" is set to "Enabled".

Use the Windows Registry Editor to navigate to the following HKCU\Software\Policies\Microsoft\Office\15.0\common\broadcast 

If the value 'disableprogrammaticaccess' is REG_DWORD = 1, this is not a finding.

Implementation Procedure

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2013 -> Present Online -> "Restrict programmatic access for creating online presentations in PowerPoint and Word" to "Enabled".

STIG check 31 of 47 in the Microsoft Office System 2013 STIG checklist

← Previous · V-228545Automation Security to enforce macro level security in Office documents must be configured.Next · V-228547 →Document metadata for password protected files must be protected.