V2R1 changes
Microsoft OneDrive STIG V2R1 (2020-11-13) replaced V1R3 (2020-04-24): 13 checks added, 13 removed. It has 13 checks, against 13 in V1R3.
V2R1 checklistV1R3 checklist Compare V1R3 and V2R1 in STIG Compare
- 13 added
- 13 removed
- 0 updated
Added in V2R1 (13)
- V-215529CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
- V-215530CAT IIEnabling IE Bind to Object functionality must be present.
- V-215531CAT IISaved from URL mark to assure Internet zone processing must be enforced.
- V-215532CAT IINavigation to URLs embedded in Office products must be blocked.
- V-215533CAT IIScripted Window Security must be enforced.
- V-215534CAT IIAdd-on Management functionality must be allowed.
- V-215535CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
- V-215536CAT IIFile Downloads must be configured for proper restrictions.
- V-215537CAT IIProtection from zone elevation must be enforced.
- V-215538CAT IIActiveX Installs must be configured for proper restriction.
- V-230562CAT IIOneDrive must only allow synchronizing of accounts for DoD organization instances.
- V-230563CAT IIExploit Protection mitigations in Windows 10 must be configured for OneDrive.exe.
- V-230564CAT IIThe use of personal accounts for OneDrive synchronization must be disabled.
Removed since V1R3 (13)
- V-71297CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
- V-71301CAT IIEnabling IE Bind to Object functionality must be present.
- V-71303CAT IISaved from URL mark to assure Internet zone processing must be enforced.
- V-71305CAT IINavigation to URLs embedded in Office products must be blocked.
- V-71309CAT IIScripted Window Security must be enforced.
- V-71311CAT IIAdd-on Management functionality must be allowed.
- V-71313CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
- V-71317CAT IIFile Downloads must be configured for proper restrictions.
- V-71319CAT IIProtection from zone elevation must be enforced.
- V-71321CAT IIActiveX Installs must be configured for proper restriction.
- V-71323CAT IIUsers must be prevented from using the remote fetch feature to access files on the machine (32 bit).
- V-71327CAT IIUsers must be prevented from using the remote fetch feature to access files on the machine (64 bit).
- V-71331CAT IIUsers must be prevented from configuring personal OneDrive accounts.
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R1 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.