V2R1 changes
Microsoft PowerPoint 2016 STIG V2R1 (2026-01-05) replaced V1R1 (2016-11-14): 38 checks added, 37 removed. It has 38 checks, against 37 in V1R1.
V2R1 checklistV1R1 checklist Compare V1R1 and V2R1 in STIG Compare
- 38 added
- 37 removed
- 0 updated
Added in V2R1 (38)
- V-238054CAT IIDisabling of user name and password syntax from being used in URLs must be enforced in PowerPoint.
- V-238055CAT IIBlocking as default file block opening behavior must be enforced.
- V-238056CAT IIThe Internet Explorer Bind to Object functionality must be enabled in PowerPoint.
- V-238057CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing in PowerPoint.
- V-238058CAT IIConfiguration for file validation must be enforced.
- V-238059CAT IIFiles from the Internet zone must be opened in Protected View.
- V-238060CAT IINavigation to URLs embedded in Office products must be blocked in PowerPoint.
- V-238061CAT IIScripted Window Security must be enforced in PowerPoint.
- V-238062CAT IIAdd-on Management functionality must be allowed in PowerPoint.
- V-238063CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
- V-238064CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked in PowerPoint.
- V-238065CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-238066CAT IIFile Downloads must be configured for proper restrictions in PowerPoint.
- V-238067CAT IIAll automatic loading from trusted locations must be disabled.
- V-238068CAT IIDisallowance of trusted locations on the network must be enforced.
- V-238069CAT IIThe Save commands default file format must be configured.
- V-238070CAT IIThe scanning of encrypted macros in open XML documents must be enforced.
- V-238071CAT IITrust access for VBA must be disallowed.
- V-238072CAT IIProtection from zone elevation must be enforced in PowerPoint.
- V-238073CAT IIActiveX Installs must be configured for proper restriction in PowerPoint.
- V-238074CAT IIFiles in unsafe locations must be opened in Protected View.
- V-238075CAT IIThe ability to run programs from a PowerPoint presentation must be disallowed.
- V-238076CAT IIDocument behavior if file validation fails must be set.
- V-238077CAT IIAttachments opened from Outlook must be in Protected View.
- V-238078CAT IIWarning Bar settings for VBA macros must be configured.
- V-238079CAT IIDisabling of user name and password syntax from being used in URLs must be enforced in PowerPoint Viewer.
- V-238080CAT IIThe Internet Explorer Bind to Object functionality must be enabled in PowerPoint Viewer.
- V-238081CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing in PowerPoint Viewer.
- V-238082CAT IINavigation to URLs embedded in Office products must be blocked in PowerPoint Viewer.
- V-238083CAT IIScripted Window Security must be enforced in PowerPoint Viewer.
- V-238084CAT IIAdd-on Management functionality must be allowed in PowerPoint Viewer.
- V-238085CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked in PowerPoint Viewer.
- V-238086CAT IIFile Downloads must be configured for proper restrictions in PowerPoint Viewer.
- V-238087CAT IIProtection from zone elevation must be enforced in PowerPoint Viewer.
- V-238088CAT IIActiveX Installs must be configured for proper restriction in PowerPoint Viewer.
- V-238089CAT IIMacros must be blocked from running in Office files from the Internet.
- V-238090CAT IIFiles on local Intranet UNC must be opened in Protected View.
- V-279946CAT IThe version of PowerPoint running on the system must be a supported version.
Removed since V1R1 (37)
- V-70641CAT IIDisabling of user name and password syntax from being used in URLs must be enforced in PowerPoint.
- V-70643CAT IIBlocking as default file block opening behavior must be enforced.
- V-70645CAT IIThe Internet Explorer Bind to Object functionality must be enabled in PowerPoint.
- V-70647CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing in PowerPoint.
- V-70649CAT IIConfiguration for file validation must be enforced.
- V-70651CAT IIFiles from the Internet zone must be opened in Protected View.
- V-70653CAT IIAdd-on Management functionality must be allowed in PowerPoint.
- V-70655CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
- V-70657CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked in PowerPoint.
- V-70659CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-70661CAT IIFile Downloads must be configured for proper restrictions in PowerPoint.
- V-70663CAT IIAll automatic loading from trusted locations must be disabled.
- V-70665CAT IIDisallowance of trusted locations on the network must be enforced.
- V-70667CAT IIThe Save commands default file format must be configured.
- V-70669CAT IIThe scanning of encrypted macros in open XML documents must be enforced.
- V-70671CAT IITrust access for VBA must be disallowed.
- V-70673CAT IIProtection from zone elevation must be enforced in PowerPoint.
- V-70675CAT IIActiveX Installs must be configured for proper restriction in PowerPoint.
- V-70677CAT IIThe ability to run programs from a PowerPoint presentation must be disallowed.
- V-70679CAT IIAttachments opened from Outlook must be in Protected View.
- V-70681CAT IIWarning Bar settings for VBA macros must be configured.
- V-70683CAT IIDisabling of user name and password syntax from being used in URLs must be enforced in PowerPoint Viewer.
- V-70685CAT IIThe Internet Explorer Bind to Object functionality must be enabled in PowerPoint Viewer.
- V-70687CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing in PowerPoint Viewer.
- V-70689CAT IINavigation to URLs embedded in Office products must be blocked in PowerPoint Viewer.
- V-70691CAT IIScripted Window Security must be enforced in PowerPoint Viewer.
- V-70693CAT IIAdd-on Management functionality must be allowed in PowerPoint Viewer.
- V-70695CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked in PowerPoint Viewer.
- V-70697CAT IIProtection from zone elevation must be enforced in PowerPoint Viewer.
- V-70699CAT IIActiveX Installs must be configured for proper restriction in PowerPoint Viewer.
- V-70701CAT IIMacros must be blocked from running in Office files from the Internet.
- V-71401CAT IINavigation to URLs embedded in Office products must be blocked in PowerPoint.
- V-71403CAT IIScripted Window Security must be enforced in PowerPoint.
- V-71405CAT IIFiles in unsafe locations must be opened in Protected View.
- V-71407CAT IIDocument behavior if file validation fails must be set.
- V-71641CAT IIFiles on local Intranet UNC must be opened in Protected View.
- V-71647CAT IIFile Downloads must be configured for proper restrictions in PowerPoint Viewer.
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R1 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.