← Back to Microsoft Office 365 ProPlus Security Technical Implementation Guide

V-223349

CAT II (Medium)

Scripts associated with shared folders must be prevented from execution in Outlook.

Rule ID

SV-223349r961092_rule

STIG

Microsoft Office 365 ProPlus Security Technical Implementation Guide

Version

V3R5

CCIs

CCI-001170

Discussion

This policy setting controls whether Outlook executes scripts associated with custom forms or folder home pages for shared folders.

Check Content

Verify the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for shared folders is set to "Enabled".

Use the Windows Registry to navigate to the following key:

HKCU\software\policies\microsoft\office\16.0\outlook\security

If the value for sharedfolderscript is set to REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for shared folders to "Enabled".