V1R7 changes
Microsoft PowerPoint 2013 STIG V1R7 (2024-07-24) replaced V1R6 (2018-04-27): 41 checks added, 40 removed. It has 41 checks, against 40 in V1R6.
V1R7 checklistV1R6 checklist Compare V1R6 and V1R7 in STIG Compare
- 41 added
- 40 removed
- 0 updated
Added in V1R7 (41)
- V-242745CAT IIDisabling of user name and password syntax from being used in URLs must be enforced in PowerPoint.
- V-242746CAT IIBlocking as default file block opening behavior must be enforced.
- V-242747CAT IIThe Internet Explorer Bind to Object functionality must be enabled in PowerPoint.
- V-242748CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing in PowerPoint.
- V-242749CAT IIConfiguration for file validation must be enforced.
- V-242750CAT IIFiles from the Internet zone must be opened in Protected View.
- V-242751CAT IINavigation to URLs embedded in Office products must be blocked in PowerPoint.
- V-242752CAT IIScripted Window Security must be enforced in PowerPoint.
- V-242753CAT IIAdd-on Management functionality must be allowed in PowerPoint.
- V-242754CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
- V-242755CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked in PowerPoint.
- V-242756CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-242757CAT IIFile Downloads must be configured for proper restrictions in PowerPoint.
- V-242758CAT IIAll automatic loading from Trusted Locations must be disabled.
- V-242759CAT IIDisallowance of Trusted Locations on the network must be enforced.
- V-242760CAT IIThe Save commands default file format must be configured.
- V-242761CAT IIEnforce encrypted macros to be scanned in open XML documents must be determined and configured.
- V-242762CAT IITrust access for VBA must be disallowed.
- V-242763CAT IIProtection from zone elevation must be enforced in PowerPoint.
- V-242764CAT IIThe opening of pre-release versions of file formats new to PowerPoint 2013 through the Compatibility Pack for Office 2013 and PowerPoint 2013 Converter must be blocked.
- V-242765CAT IIActiveX Installs must be configured for proper restriction in PowerPoint.
- V-242766CAT IIFiles in unsafe locations must be opened in Protected View.
- V-242767CAT IIThe ability to run programs from a PowerPoint presentation must be disallowed.
- V-242768CAT IIHidden markup options must be visible.
- V-242769CAT IIAutomatic download of linked images must be disallowed.
- V-242770CAT IIDocument behavior if file validation fails must be set.
- V-242771CAT IIAttachments opened from Outlook must be in Protected View.
- V-242772CAT IIWarning Bar settings for VBA macros must be configured.
- V-242773CAT IIThe configuration for Slide Update with counterparts must be disallowed.
- V-242774CAT IIDisabling of user name and password syntax from being used in URLs must be enforced in PowerPoint Viewer.
- V-242775CAT IIThe Internet Explorer Bind to Object functionality must be enabled in PowerPoint Viewer.
- V-242776CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing in PowerPoint Viewer.
- V-242777CAT IINavigation to URLs embedded in Office products must be blocked in PowerPoint Viewer.
- V-242778CAT IIScripted Window Security must be enforced in PowerPoint Viewer.
- V-242779CAT IIAdd-on Management functionality must be allowed in PowerPoint Viewer.
- V-242780CAT IIFile Links that invoke instances of Internet Explorer from within an Office product must be blocked in PowerPoint Viewer.
- V-242781CAT IIFile Downloads must be configured for proper restrictions in PowerPoint Viewer.
- V-242782CAT IIProtection from zone elevation must be enforced in PowerPoint Viewer.
- V-242783CAT IIActiveX Installs must be configured for proper restriction in PowerPoint Viewer.
- V-242784CAT IIMacros must be blocked from running in Office 2013 files from the Internet.
- V-265895CAT IThe version of PowerPoint running on the system must be a supported version.
Removed since V1R6 (40)
- V-17173CAT IIDisabling of user name and password syntax from being used in URLs must be enforced in PowerPoint.
- V-17174CAT IIThe Internet Explorer Bind to Object functionality must be enabled in PowerPoint.
- V-17175CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing in PowerPoint.
- V-17183CAT IINavigation to URLs embedded in Office products must be blocked in PowerPoint.
- V-17184CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked in PowerPoint.
- V-17187CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-17322CAT IIThe opening of pre-release versions of file formats new to PowerPoint 2013 through the Compatibility Pack for Office 2013 and PowerPoint 2013 Converter must be blocked.
- V-17471CAT IIAll automatic loading from Trusted Locations must be disabled.
- V-17473CAT IIEnforce encrypted macros to be scanned in open XML documents must be determined and configured.
- V-17520CAT IIDisallowance of Trusted Locations on the network must be enforced.
- V-17521CAT IIThe Save commands default file format must be configured.
- V-17522CAT IITrust access for VBA must be disallowed.
- V-17545CAT IIWarning Bar settings for VBA macros must be configured.
- V-17752CAT IIHidden markup options must be visible.
- V-17788CAT IIThe ability to run programs from a PowerPoint presentation must be disallowed.
- V-17809CAT IIAutomatic download of linked images must be disallowed.
- V-26584CAT IIAdd-on Management functionality must be allowed in PowerPoint.
- V-26585CAT IIProtection from zone elevation must be enforced in PowerPoint.
- V-26586CAT IIActiveX Installs must be configured for proper restriction in PowerPoint.
- V-26587CAT IIFile Downloads must be configured for proper restrictions in PowerPoint.
- V-26588CAT IIScripted Window Security must be enforced in PowerPoint.
- V-26589CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
- V-26592CAT IIConfiguration for file validation must be enforced.
- V-26612CAT IIBlocking as default file block opening behavior must be enforced.
- V-26614CAT IIFiles from the Internet zone must be opened in Protected View.
- V-26615CAT IIFiles in unsafe locations must be opened in Protected View.
- V-26616CAT IIDocument behavior if file validation fails must be set.
- V-26617CAT IIAttachments opened from Outlook must be in Protected View.
- V-26639CAT IIThe configuration for Slide Update with counterparts must be disallowed.
- V-42327CAT IIDisabling of user name and password syntax from being used in URLs must be enforced in PowerPoint Viewer.
- V-42328CAT IIActiveX Installs must be configured for proper restriction in PowerPoint Viewer.
- V-42329CAT IIProtection from zone elevation must be enforced in PowerPoint Viewer.
- V-42330CAT IIFile Links that invoke instances of Internet Explorer from within an Office product must be blocked in PowerPoint Viewer.
- V-42331CAT IIFile Downloads must be configured for proper restrictions in PowerPoint Viewer.
- V-42332CAT IIThe Internet Explorer Bind to Object functionality must be enabled in PowerPoint Viewer.
- V-42333CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing in PowerPoint Viewer.
- V-42334CAT IINavigation to URLs embedded in Office products must be blocked in PowerPoint Viewer.
- V-42335CAT IIScripted Window Security must be enforced in PowerPoint Viewer.
- V-42336CAT IIAdd-on Management functionality must be allowed in PowerPoint Viewer.
- V-72839CAT IIMacros must be blocked from running in Office 2013 files from the Internet.
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R7 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.