STIGQter: STIG Summary:| Checked | Name | Title |
|---|---|---|
| ☐ | SV-228516r508020_rule | Office client polling of SharePoint servers published links must be disabled. |
| ☐ | SV-228517r508020_rule | The Help Improve Proofing Tools feature for Office must be configured. |
| ☐ | SV-228518r508020_rule | A mix of policy and user locations for Office Products must be disallowed. |
| ☐ | SV-228519r508020_rule | Smart Documents use of Manifests in Office must be disallowed. |
| ☐ | SV-228520r508020_rule | Legacy format signatures must be enabled. |
| ☐ | SV-228521r508020_rule | External Signature Services Menu for Office must be suppressed. |
| ☐ | SV-228522r508020_rule | Inclusion of document properties for PDF and XPS output must be disallowed. |
| ☐ | SV-228523r508020_rule | Blogging entries created from inside Office products must be configured for SharePoint only. |
| ☐ | SV-228524r508020_rule | The Enable Updates and Disable Updates options in the UI must be hidden from users. |
| ☐ | SV-228525r508020_rule | When using the Office Feedback tool, the ability to include a screenshot must be disabled. |
| ☐ | SV-228526r508020_rule | The ability to run unsecure Office apps must be disabled. |
| ☐ | SV-228527r508020_rule | The Office Telemetry Agent must be configured to obfuscate the file name, file path, and title of Office documents before uploading telemetry data to the shared folder. |
| ☐ | SV-228528r508020_rule | The Opt-In Wizard must be disabled. |
| ☐ | SV-228529r508020_rule | The Customer Experience Improvement Program for Office must be disabled. |
| ☐ | SV-228530r508020_rule | Automatic receiving of small updates to improve reliability must be disallowed. |
| ☐ | SV-228531r508020_rule | The Internet Fax Feature must be disabled. |
| ☐ | SV-228532r508020_rule | Online content options must be configured for offline content availability. |
| ☐ | SV-228533r508020_rule | The video informing a user about signing into Office365 must be disabled. |
| ☐ | SV-228534r508020_rule | The first-run prompt to sign into Office365 must be disabled. |
| ☐ | SV-228535r508020_rule | The ability to sign into Office365 must be disabled. |
| ☐ | SV-228536r508020_rule | The ability to automatically hyperlink screenshots within Word, PowerPoint, Excel and Outlook must be disabled. |
| ☐ | SV-228537r508020_rule | The prompt to save to OneDrive (formerly SkyDrive) must be disabled. |
| ☐ | SV-228538r508020_rule | Office Presentation Service must be removed as an option for presenting PowerPoint and Word online. |
| ☐ | SV-228539r508020_rule | The Office Feedback tool must be disabled. |
| ☐ | SV-228540r508020_rule | Roaming settings must be stored locally and not synchronized to the Microsoft Office roaming settings web service. |
| ☐ | SV-228541r508020_rule | The ability of the Office Telemetry Agent to periodically upload telemetry data to a shared folder must be disabled. |
| ☐ | SV-228542r508020_rule | The Office Telemetry Agent and Office applications must be configured to collect telemetry data. |
| ☐ | SV-228543r508020_rule | Documents must be configured to not open as Read Write when browsing. |
| ☐ | SV-228544r508020_rule | Relying on Vector markup Language (VML) for displaying graphics in browsers must be disallowed. |
| ☐ | SV-228545r557514_rule | Automation Security to enforce macro level security in Office documents must be configured. |
| ☐ | SV-228546r508020_rule | The ability to create an online presentation programmatically must be disabled. |
| ☐ | SV-228547r508020_rule | Document metadata for password protected files must be protected. |
| ☐ | SV-228548r508020_rule | The encryption type for password protected Open XML files must be set. |
| ☐ | SV-228549r508020_rule | The encryption type for password protected Office 97 thru Office 2003 must be set. |
| ☐ | SV-228550r508020_rule | Passwords for secured documents must be enforced. |
| ☐ | SV-228551r508020_rule | Trust Bar notifications for Security messages must be enforced. |
| ☐ | SV-228552r508020_rule | Load controls in forms3 must be disabled from loading. |
| ☐ | SV-228553r508020_rule | Users must be prevented from using or inserting apps that come from the Office Store. |
| ☐ | SV-228554r557517_rule | Changing permissions on rights managed content for users must be enforced. |
| ☐ | SV-228555r508020_rule | Office must be configured to not allow read with browsers. |
| ☐ | SV-228556r508020_rule | Connection verification of permissions must be enforced. |
| ☐ | SV-228557r508020_rule | ActiveX control initialization must be disabled. |
| ☐ | SV-228558r508020_rule | Hyperlink warnings for Office must be configured for use. |
| ☐ | SV-228559r508020_rule | Document Information panel Beaconing must show UI. |
| ☐ | SV-228560r508020_rule | Rights managed Office Open XML files must be protected. |
| ☐ | SV-228561r508020_rule | Encrypt document properties must be configured for OLE documents. |
| ☐ | SV-228562r508020_rule | Office automatic updates must be enabled for Office products installed via Click-to-Run and configured to use a Trusted site. |