What changed in Microsoft Publisher 2016 STIG V2R1V2R1 changes

Microsoft Publisher 2016 STIG V2R1 (2026-01-05) replaced V1R3 (2018-04-27): 16 checks added, 15 removed. It has 16 checks, against 15 in V1R3.

V2R1 checklistV1R3 checklist Compare V1R3 and V2R1 in STIG Compare

  • 16 added
  • 15 removed
  • 0 updated

Added in V2R1 (16)

  • V-238482CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-238483CAT IIEnabling IE Bind to Object functionality must be present.
  • V-238484CAT IISaved from URL mark to assure Internet zone processing must be enforced.
  • V-238485CAT IINavigation to URLs embedded in Office products must be blocked.
  • V-238486CAT IIScripted Window Security must be enforced.
  • V-238487CAT IIAdd-on Management functionality must be allowed.
  • V-238488CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
  • V-238489CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
  • V-238490CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
  • V-238491CAT IIFile Downloads must be configured for proper restrictions.
  • V-238492CAT IIProtection from zone elevation must be enforced.
  • V-238493CAT IIActiveX Installs must be configured for proper restriction.
  • V-238494CAT IIWarning Bar settings for VBA macros must be configured.
  • V-238495CAT IIFatally corrupt files must be blocked from opening.
  • V-238496CAT IIThe Publisher Automation Security Level must be configured for high security.
  • V-279948CAT IThe version of Publisher running on the system must be a supported version.

Removed since V1R3 (15)

  • V-70729CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-70731CAT IIEnabling IE Bind to Object functionality must be present.
  • V-70733CAT IISaved from URL mark to assure Internet zone processing must be enforced.
  • V-70735CAT IINavigation to URLs embedded in Office products must be blocked.
  • V-70747CAT IIScripted Window Security must be enforced.
  • V-70749CAT IIAdd-on Management functionality must be allowed.
  • V-70751CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
  • V-70753CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
  • V-70755CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
  • V-70757CAT IIFile Downloads must be configured for proper restrictions.
  • V-70759CAT IIProtection from zone elevation must be enforced.
  • V-70761CAT IIActiveX Installs must be configured for proper restriction.
  • V-70763CAT IIWarning Bar settings for VBA macros must be configured.
  • V-71673CAT IIFatally corrupt files must be blocked from opening.
  • V-71675CAT IIThe Publisher Automation Security Level must be configured for high security.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R1 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.