Microsoft Publisher 2016 Security Technical Implementation Guide

Version: 1

Checked	Name	Title
☐	SV-85353r1_rule	Disabling of user name and password syntax from being used in URLs must be enforced.
☐	SV-85355r1_rule	Enabling IE Bind to Object functionality must be present.
☐	SV-85357r1_rule	Saved from URL mark to assure Internet zone processing must be enforced.
☐	SV-85359r1_rule	Navigation to URLs embedded in Office products must be blocked.
☐	SV-85371r1_rule	Scripted Window Security must be enforced.
☐	SV-85373r1_rule	Add-on Management functionality must be allowed.
☐	SV-85375r1_rule	Add-ins to Office applications must be signed by a Trusted Publisher.
☐	SV-85377r1_rule	Links that invoke instances of Internet Explorer from within an Office product must be blocked.
☐	SV-85379r1_rule	Trust Bar Notifications for unsigned application add-ins must be blocked.
☐	SV-85381r1_rule	File Downloads must be configured for proper restrictions.
☐	SV-85383r1_rule	Protection from zone elevation must be enforced.
☐	SV-85385r1_rule	ActiveX Installs must be configured for proper restriction.
☐	SV-85387r3_rule	Warning Bar settings for VBA macros must be configured.
☐	SV-86297r1_rule	Fatally corrupt files must be blocked from opening.
☐	SV-86299r1_rule	The Publisher Automation Security Level must be configured for high security.