V2R1 changes
Microsoft Word 2016 STIG V2R1 (2026-01-05) replaced V1R1 (2016-11-14): 35 checks added, 34 removed. It has 35 checks, against 34 in V1R1.
V2R1 checklistV1R1 checklist Compare V1R1 and V2R1 in STIG Compare
- 35 added
- 34 removed
- 0 updated
Added in V2R1 (35)
- V-238121CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
- V-238122CAT IIBlocking as default file block opening behavior must be enforced.
- V-238123CAT IIThe Internet Explorer Bind to Object functionality must be enabled.
- V-238124CAT IISaved from URL mark to assure Internet zone processing must be enforced.
- V-238125CAT IIConfiguration for file validation must be enforced.
- V-238126CAT IIFiles from the Internet zone must be opened in Protected View.
- V-238127CAT IINavigation to URLs embedded in Office products must be blocked.
- V-238128CAT IIScripted Window Security must be enforced.
- V-238129CAT IIAdd-on Management functionality must be allowed.
- V-238130CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
- V-238131CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
- V-238132CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-238133CAT IIFile Downloads must be configured for proper restrictions.
- V-238134CAT IIAll automatic loading from trusted locations must be disabled.
- V-238135CAT IIDisallowance of trusted locations on the network must be enforced.
- V-238136CAT IIThe Save commands default file format must be configured.
- V-238137CAT IIForce encrypted macros to be scanned in open XML documents must be determined and configured.
- V-238138CAT IITrust access for VBA must be disallowed.
- V-238139CAT IIProtection from zone elevation must be enforced.
- V-238140CAT IIActiveX Installs must be configured for proper restriction.
- V-238141CAT IIFiles in unsafe locations must be opened in Protected View.
- V-238142CAT IIDocument behavior if file validation fails must be set.
- V-238143CAT IIAttachments opened from Outlook must be in Protected View.
- V-238144CAT IIThe automatically update links feature must be disabled.
- V-238145CAT IIWarning Bar settings for VBA macros must be configured.
- V-238146CAT IIOnline translation dictionaries must not be used.
- V-238147CAT IIWord 2 and earlier binary documents and templates must be blocked for open/save.
- V-238148CAT IIWord 2000 binary documents and templates must be configured to edit in protected view.
- V-238149CAT IIWord 6.0 binary documents and templates must be configured for block open/save actions.
- V-238150CAT IIWord 95 binary documents and templates must be configured to edit in protected view.
- V-238151CAT IIWord 97 binary documents and templates must be configured to edit in protected view.
- V-238152CAT IIWord XP binary documents and templates must be configured to edit in protected view.
- V-238153CAT IIMacros must be blocked from running in Office files from the Internet.
- V-238154CAT IIFiles on local Intranet UNC must be opened in Protected View.
- V-279951CAT IThe version of Word running on the system must be a supported version.
Removed since V1R1 (34)
- V-71041CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
- V-71043CAT IIBlocking as default file block opening behavior must be enforced.
- V-71045CAT IIThe Internet Explorer Bind to Object functionality must be enabled.
- V-71047CAT IISaved from URL mark to assure Internet zone processing must be enforced.
- V-71049CAT IIConfiguration for file validation must be enforced.
- V-71051CAT IIFiles from the Internet zone must be opened in Protected View.
- V-71053CAT IINavigation to URLs embedded in Office products must be blocked.
- V-71055CAT IIScripted Window Security must be enforced.
- V-71057CAT IIAdd-on Management functionality must be allowed.
- V-71059CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
- V-71061CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
- V-71063CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-71065CAT IIFile Downloads must be configured for proper restrictions.
- V-71067CAT IIAll automatic loading from trusted locations must be disabled.
- V-71069CAT IIDisallowance of trusted locations on the network must be enforced.
- V-71071CAT IIThe Save commands default file format must be configured.
- V-71073CAT IIForce encrypted macros to be scanned in open XML documents must be determined and configured.
- V-71075CAT IITrust access for VBA must be disallowed.
- V-71077CAT IIProtection from zone elevation must be enforced.
- V-71079CAT IIActiveX Installs must be configured for proper restriction.
- V-71081CAT IIFiles in unsafe locations must be opened in Protected View.
- V-71083CAT IIDocument behavior if file validation fails must be set.
- V-71085CAT IIAttachments opened from Outlook must be in Protected View.
- V-71087CAT IIThe automatically update links feature must be disabled.
- V-71089CAT IIWarning Bar settings for VBA macros must be configured.
- V-71091CAT IIOnline translation dictionaries must not be used.
- V-71093CAT IIWord 2 and earlier binary documents and templates must be blocked for open/save.
- V-71095CAT IIWord 2000 binary documents and templates must be configured to edit in protected view.
- V-71097CAT IIWord 6.0 binary documents and templates must be configured for block open/save actions.
- V-71099CAT IIWord 95 binary documents and templates must be configured to edit in protected view.
- V-71101CAT IIWord 97 binary documents and templates must be configured to edit in protected view.
- V-71103CAT IIWord XP binary documents and templates must be configured to edit in protected view.
- V-71107CAT IIMacros must be blocked from running in Office files from the Internet.
- V-71643CAT IIFiles on local Intranet UNC must be opened in Protected View.
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R1 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.