From 4a9eaab9d676cb5f06d4dde299e9da02e223920b Mon Sep 17 00:00:00 2001 From: mick Date: Tue, 21 Dec 2021 18:12:59 +0100 Subject: [PATCH] Add Security Baseline Microsoft 365 Apps for enterprise, v2112 --- README.md | 3 + ...eline_microsoft_365_apps_v2112_machine.csv | 195 ++++++++++++++++++ ...baseline_microsoft_365_apps_v2112_user.csv | 154 ++++++++++++++ lists/finding_list_translation.csv | 3 +- 4 files changed, 354 insertions(+), 1 deletion(-) create mode 100644 lists/finding_list_msft_security_baseline_microsoft_365_apps_v2112_machine.csv create mode 100644 lists/finding_list_msft_security_baseline_microsoft_365_apps_v2112_user.csv diff --git a/README.md b/README.md index d59fc81..49180ff 100644 --- a/README.md +++ b/README.md @@ -199,6 +199,8 @@ HardeningKitty can be used to audit systems against the following baselines / be | Microsoft Security baseline for Office 365 ProPlus (User) | Sept 2019 | Final | | Microsoft Security Baseline for Microsoft 365 Apps for enterprise (Machine) | v2104, v2106 | Final | | Microsoft Security Baseline for Microsoft 365 Apps for enterprise (User) | v2104, v2106 | Final | +| Microsoft Security Baseline for Microsoft 365 Apps for enterprise (Machine) | v2112 | Final | +| Microsoft Security Baseline for Microsoft 365 Apps for enterprise (User) | v2112 | Final | | Microsoft Windows Server TLS Settings | 1809 | 1.0 | | Microsoft Windows Server TLS Settings (Future Use with TLSv1.3) | 1903 | 1.0 | @@ -229,6 +231,7 @@ HardeningKitty can be used to audit systems against the following baselines / be * [Security baseline for Office 365 ProPlus (v1908, Sept 2019) - FINAL](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-office-365-proplus-v1908-sept-2019-final/ba-p/873084) * [Security baseline for Microsoft 365 Apps for enterprise v2104 - FINAL](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-365-apps-for-enterprise-v2104/ba-p/2307695) * [Security baseline for Microsoft 365 Apps for enterprise v2106 - FINAL](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-365-apps-for-enterprise-v2106/ba-p/2492355) +* [Security baseline for Microsoft 365 Apps for enterprise, v2112](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-365-apps-for-enterprise-v2112/ba-p/3038172) * [mackwage/windows_hardening.cmd](https://gist.github.com/mackwage/08604751462126599d7e52f233490efe) * [Security baseline for Microsoft Edge version 87](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-edge-version-87/ba-p/1950297) * [Security baseline for Microsoft Edge version 89](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-edge-version-89/ba-p/2186265) diff --git a/lists/finding_list_msft_security_baseline_microsoft_365_apps_v2112_machine.csv b/lists/finding_list_msft_security_baseline_microsoft_365_apps_v2112_machine.csv new file mode 100644 index 0000000..1822dcc --- /dev/null +++ b/lists/finding_list_msft_security_baseline_microsoft_365_apps_v2112_machine.csv @@ -0,0 +1,195 @@ +ID,Category,Name,Method,MethodArgument,RegistryPath,RegistryItem,ClassName,Namespace,Property,DefaultValue,RecommendedValue,Operator,Severity +6000,"Office 2016 / Office 365","IE Security: Add-on Management (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",excel.exe,,,,,1,=,Medium +6001,"Office 2016 / Office 365","IE Security: Add-on Management (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",exprwd.exe,,,,,1,=,Medium +6002,"Office 2016 / Office 365","IE Security: Add-on Management (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",groove.exe,,,,,1,=,Medium +6003,"Office 2016 / Office 365","IE Security: Add-on Management (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",msaccess.exe,,,,,1,=,Medium +6004,"Office 2016 / Office 365","IE Security: Add-on Management (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",mse7.exe,,,,,1,=,Medium +6005,"Office 2016 / Office 365","IE Security: Add-on Management (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",mspub.exe,,,,,1,=,Medium +6006,"Office 2016 / Office 365","IE Security: Add-on Management (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",onenote.exe,,,,,1,=,Medium +6007,"Office 2016 / Office 365","IE Security: Add-on Management (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",outlook.exe,,,,,1,=,Medium +6008,"Office 2016 / Office 365","IE Security: Add-on Management (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",powerpnt.exe,,,,,1,=,Medium +6009,"Office 2016 / Office 365","IE Security: Add-on Management (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",pptview.exe,,,,,1,=,Medium +6010,"Office 2016 / Office 365","IE Security: Add-on Management (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",spdesign.exe,,,,,1,=,Medium +6011,"Office 2016 / Office 365","IE Security: Add-on Management (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",visio.exe,,,,,1,=,Medium +6012,"Office 2016 / Office 365","IE Security: Add-on Management (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",winproj.exe,,,,,1,=,Medium +6013,"Office 2016 / Office 365","IE Security: Add-on Management (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management",winword.exe,,,,,1,=,Medium +6014,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",excel.exe,,,,,1,=,Medium +6015,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",exprwd.exe,,,,,1,=,Medium +6016,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",groove.exe,,,,,1,=,Medium +6017,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",msaccess.exe,,,,,1,=,Medium +6018,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",mse7.exe,,,,,1,=,Medium +6019,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",mspub.exe,,,,,1,=,Medium +6020,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",onenote.exe,,,,,1,=,Medium +6021,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",outlook.exe,,,,,1,=,Medium +6022,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",powerpnt.exe,,,,,1,=,Medium +6023,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",pptview.exe,,,,,1,=,Medium +6024,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",spdesign.exe,,,,,1,=,Medium +6025,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",visio.exe,,,,,1,=,Medium +6026,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",winproj.exe,,,,,1,=,Medium +6027,"Office 2016 / Office 365","IE Security: Consistent Mime Handling (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling",winword.exe,,,,,1,=,Medium +6028,"Office 2016 / Office 365","IE Security: Disable user name and password (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",excel.exe,,,,,1,=,Medium +6029,"Office 2016 / Office 365","IE Security: Disable user name and password (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",exprwd.exe,,,,,1,=,Medium +6030,"Office 2016 / Office 365","IE Security: Disable user name and password (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",groove.exe,,,,,1,=,Medium +6031,"Office 2016 / Office 365","IE Security: Disable user name and password (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",msaccess.exe,,,,,1,=,Medium +6032,"Office 2016 / Office 365","IE Security: Disable user name and password (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",mse7.exe,,,,,1,=,Medium +6033,"Office 2016 / Office 365","IE Security: Disable user name and password (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",mspub.exe,,,,,1,=,Medium +6034,"Office 2016 / Office 365","IE Security: Disable user name and password (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",onenote.exe,,,,,1,=,Medium +6035,"Office 2016 / Office 365","IE Security: Disable user name and password (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",outlook.exe,,,,,1,=,Medium +6036,"Office 2016 / Office 365","IE Security: Disable user name and password (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",powerpnt.exe,,,,,1,=,Medium +6037,"Office 2016 / Office 365","IE Security: Disable user name and password (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",pptview.exe,,,,,1,=,Medium +6038,"Office 2016 / Office 365","IE Security: Disable user name and password (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",spdesign.exe,,,,,1,=,Medium +6039,"Office 2016 / Office 365","IE Security: Disable user name and password (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",visio.exe,,,,,1,=,Medium +6040,"Office 2016 / Office 365","IE Security: Disable user name and password (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",winproj.exe,,,,,1,=,Medium +6041,"Office 2016 / Office 365","IE Security: Disable user name and password (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable",winword.exe,,,,,1,=,Medium +6042,"Office 2016 / Office 365","IE Security: Information Bar (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",excel.exe,,,,,1,=,Medium +6043,"Office 2016 / Office 365","IE Security: Information Bar (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",exprwd.exe,,,,,1,=,Medium +6044,"Office 2016 / Office 365","IE Security: Information Bar (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",groove.exe,,,,,1,=,Medium +6045,"Office 2016 / Office 365","IE Security: Information Bar (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",msaccess.exe,,,,,1,=,Medium +6046,"Office 2016 / Office 365","IE Security: Information Bar (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",mse7.exe,,,,,1,=,Medium +6047,"Office 2016 / Office 365","IE Security: Information Bar (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",mspub.exe,,,,,1,=,Medium +6048,"Office 2016 / Office 365","IE Security: Information Bar (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",onenote.exe,,,,,1,=,Medium +6049,"Office 2016 / Office 365","IE Security: Information Bar (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",outlook.exe,,,,,1,=,Medium +6050,"Office 2016 / Office 365","IE Security: Information Bar (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",powerpnt.exe,,,,,1,=,Medium +6051,"Office 2016 / Office 365","IE Security: Information Bar (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",pptview.exe,,,,,1,=,Medium +6052,"Office 2016 / Office 365","IE Security: Information Bar (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",spdesign.exe,,,,,1,=,Medium +6053,"Office 2016 / Office 365","IE Security: Information Bar (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",visio.exe,,,,,1,=,Medium +6054,"Office 2016 / Office 365","IE Security: Information Bar (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",winproj.exe,,,,,1,=,Medium +6055,"Office 2016 / Office 365","IE Security: Information Bar (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband",winword.exe,,,,,1,=,Medium +6056,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",excel.exe,,,,,1,=,Medium +6057,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",exprwd.exe,,,,,1,=,Medium +6058,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",groove.exe,,,,,1,=,Medium +6059,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",msaccess.exe,,,,,1,=,Medium +6060,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",mse7.exe,,,,,1,=,Medium +6061,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",mspub.exe,,,,,1,=,Medium +6062,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",onenote.exe,,,,,1,=,Medium +6063,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",outlook.exe,,,,,1,=,Medium +6064,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",powerpnt.exe,,,,,1,=,Medium +6065,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",pptview.exe,,,,,1,=,Medium +6066,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",spdesign.exe,,,,,1,=,Medium +6067,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",visio.exe,,,,,1,=,Medium +6068,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",winproj.exe,,,,,1,=,Medium +6069,"Office 2016 / Office 365","IE Security: Local Machine Zone Lockdown Security (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown",winword.exe,,,,,1,=,Medium +6070,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",excel.exe,,,,,1,=,Medium +6071,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",exprwd.exe,,,,,1,=,Medium +6072,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",groove.exe,,,,,1,=,Medium +6073,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",msaccess.exe,,,,,1,=,Medium +6074,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",mse7.exe,,,,,1,=,Medium +6075,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",mspub.exe,,,,,1,=,Medium +6076,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",onenote.exe,,,,,1,=,Medium +6077,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",outlook.exe,,,,,1,=,Medium +6078,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",powerpnt.exe,,,,,1,=,Medium +6079,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",pptview.exe,,,,,1,=,Medium +6080,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",spdesign.exe,,,,,1,=,Medium +6081,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",visio.exe,,,,,1,=,Medium +6082,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",winproj.exe,,,,,1,=,Medium +6083,"Office 2016 / Office 365","IE Security: Mime Sniffing Safety Feature (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing",winword.exe,,,,,1,=,Medium +6084,"Office 2016 / Office 365","IE Security: Navigate URL (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",excel.exe,,,,,1,=,Medium +6085,"Office 2016 / Office 365","IE Security: Navigate URL (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",exprwd.exe,,,,,1,=,Medium +6086,"Office 2016 / Office 365","IE Security: Navigate URL (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",groove.exe,,,,,1,=,Medium +6087,"Office 2016 / Office 365","IE Security: Navigate URL (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",msaccess.exe,,,,,1,=,Medium +6088,"Office 2016 / Office 365","IE Security: Navigate URL (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",mse7.exe,,,,,1,=,Medium +6089,"Office 2016 / Office 365","IE Security: Navigate URL (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",mspub.exe,,,,,1,=,Medium +6090,"Office 2016 / Office 365","IE Security: Navigate URL (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",onenote.exe,,,,,1,=,Medium +6091,"Office 2016 / Office 365","IE Security: Navigate URL (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",outlook.exe,,,,,1,=,Medium +6092,"Office 2016 / Office 365","IE Security: Navigate URL (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",powerpnt.exe,,,,,1,=,Medium +6093,"Office 2016 / Office 365","IE Security: Navigate URL (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",pptview.exe,,,,,1,=,Medium +6094,"Office 2016 / Office 365","IE Security: Navigate URL (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",spdesign.exe,,,,,1,=,Medium +6095,"Office 2016 / Office 365","IE Security: Navigate URL (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",visio.exe,,,,,1,=,Medium +6096,"Office 2016 / Office 365","IE Security: Navigate URL (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",winproj.exe,,,,,1,=,Medium +6097,"Office 2016 / Office 365","IE Security: Navigate URL (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url",winword.exe,,,,,1,=,Medium +6098,"Office 2016 / Office 365","IE Security: Object Caching Protection (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",excel.exe,,,,,1,=,Medium +6099,"Office 2016 / Office 365","IE Security: Object Caching Protection (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",exprwd.exe,,,,,1,=,Medium +6100,"Office 2016 / Office 365","IE Security: Object Caching Protection (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",groove.exe,,,,,1,=,Medium +6101,"Office 2016 / Office 365","IE Security: Object Caching Protection (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",msaccess.exe,,,,,1,=,Medium +6102,"Office 2016 / Office 365","IE Security: Object Caching Protection (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",mse7.exe,,,,,1,=,Medium +6103,"Office 2016 / Office 365","IE Security: Object Caching Protection (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",mspub.exe,,,,,1,=,Medium +6104,"Office 2016 / Office 365","IE Security: Object Caching Protection (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",onenote.exe,,,,,1,=,Medium +6105,"Office 2016 / Office 365","IE Security: Object Caching Protection (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",outlook.exe,,,,,1,=,Medium +6106,"Office 2016 / Office 365","IE Security: Object Caching Protection (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",powerpnt.exe,,,,,1,=,Medium +6107,"Office 2016 / Office 365","IE Security: Object Caching Protection (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",pptview.exe,,,,,1,=,Medium +6108,"Office 2016 / Office 365","IE Security: Object Caching Protection (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",spdesign.exe,,,,,1,=,Medium +6109,"Office 2016 / Office 365","IE Security: Object Caching Protection (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",visio.exe,,,,,1,=,Medium +6110,"Office 2016 / Office 365","IE Security: Object Caching Protection (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",winproj.exe,,,,,1,=,Medium +6111,"Office 2016 / Office 365","IE Security: Object Caching Protection (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching",winword.exe,,,,,1,=,Medium +6112,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",excel.exe,,,,,1,=,Medium +6113,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",exprwd.exe,,,,,1,=,Medium +6114,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",groove.exe,,,,,1,=,Medium +6115,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",msaccess.exe,,,,,1,=,Medium +6116,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",mse7.exe,,,,,1,=,Medium +6117,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",mspub.exe,,,,,1,=,Medium +6118,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",onenote.exe,,,,,1,=,Medium +6119,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",outlook.exe,,,,,1,=,Medium +6120,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",powerpnt.exe,,,,,1,=,Medium +6121,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",pptview.exe,,,,,1,=,Medium +6122,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",spdesign.exe,,,,,1,=,Medium +6123,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",visio.exe,,,,,1,=,Medium +6124,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",winproj.exe,,,,,1,=,Medium +6125,"Office 2016 / Office 365","IE Security: Protection From Zone Elevation (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation",winword.exe,,,,,1,=,Medium +6126,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",excel.exe,,,,,1,=,Medium +6127,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",exprwd.exe,,,,,1,=,Medium +6128,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",groove.exe,,,,,1,=,Medium +6129,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",msaccess.exe,,,,,1,=,Medium +6130,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",mse7.exe,,,,,1,=,Medium +6131,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",mspub.exe,,,,,1,=,Medium +6132,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",onenote.exe,,,,,1,=,Medium +6133,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",outlook.exe,,,,,1,=,Medium +6134,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",powerpnt.exe,,,,,1,=,Medium +6135,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",pptview.exe,,,,,1,=,Medium +6136,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",spdesign.exe,,,,,1,=,Medium +6137,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",visio.exe,,,,,1,=,Medium +6138,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",winproj.exe,,,,,1,=,Medium +6139,"Office 2016 / Office 365","IE Security: Restrict ActiveX Install (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall",winword.exe,,,,,1,=,Medium +6140,"Office 2016 / Office 365","IE Security: Restrict File Download (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",excel.exe,,,,,1,=,Medium +6141,"Office 2016 / Office 365","IE Security: Restrict File Download (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",exprwd.exe,,,,,1,=,Medium +6142,"Office 2016 / Office 365","IE Security: Restrict File Download (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",groove.exe,,,,,1,=,Medium +6143,"Office 2016 / Office 365","IE Security: Restrict File Download (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",msaccess.exe,,,,,1,=,Medium +6144,"Office 2016 / Office 365","IE Security: Restrict File Download (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",mse7.exe,,,,,1,=,Medium +6145,"Office 2016 / Office 365","IE Security: Restrict File Download (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",mspub.exe,,,,,1,=,Medium +6146,"Office 2016 / Office 365","IE Security: Restrict File Download (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",onenote.exe,,,,,1,=,Medium +6147,"Office 2016 / Office 365","IE Security: Restrict File Download (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",outlook.exe,,,,,1,=,Medium +6148,"Office 2016 / Office 365","IE Security: Restrict File Download (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",powerpnt.exe,,,,,1,=,Medium +6149,"Office 2016 / Office 365","IE Security: Restrict File Download (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",pptview.exe,,,,,1,=,Medium +6150,"Office 2016 / Office 365","IE Security: Restrict File Download (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",spdesign.exe,,,,,1,=,Medium +6151,"Office 2016 / Office 365","IE Security: Restrict File Download (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",visio.exe,,,,,1,=,Medium +6152,"Office 2016 / Office 365","IE Security: Restrict File Download (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",winproj.exe,,,,,1,=,Medium +6153,"Office 2016 / Office 365","IE Security: Restrict File Download (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload",winword.exe,,,,,1,=,Medium +6154,"Office 2016 / Office 365","IE Security: Saved from URL (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",excel.exe,,,,,1,=,Medium +6155,"Office 2016 / Office 365","IE Security: Saved from URL (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",exprwd.exe,,,,,1,=,Medium +6156,"Office 2016 / Office 365","IE Security: Saved from URL (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",groove.exe,,,,,1,=,Medium +6157,"Office 2016 / Office 365","IE Security: Saved from URL (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",msaccess.exe,,,,,1,=,Medium +6158,"Office 2016 / Office 365","IE Security: Saved from URL (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",mse7.exe,,,,,1,=,Medium +6159,"Office 2016 / Office 365","IE Security: Saved from URL (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",mspub.exe,,,,,1,=,Medium +6160,"Office 2016 / Office 365","IE Security: Saved from URL (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",onenote.exe,,,,,1,=,Medium +6161,"Office 2016 / Office 365","IE Security: Saved from URL (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",outlook.exe,,,,,1,=,Medium +6162,"Office 2016 / Office 365","IE Security: Saved from URL (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",powerpnt.exe,,,,,1,=,Medium +6163,"Office 2016 / Office 365","IE Security: Saved from URL (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",pptview.exe,,,,,1,=,Medium +6164,"Office 2016 / Office 365","IE Security: Saved from URL (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",spdesign.exe,,,,,1,=,Medium +6165,"Office 2016 / Office 365","IE Security: Saved from URL (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",visio.exe,,,,,1,=,Medium +6166,"Office 2016 / Office 365","IE Security: Saved from URL (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",winproj.exe,,,,,1,=,Medium +6167,"Office 2016 / Office 365","IE Security: Saved from URL (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck",winword.exe,,,,,1,=,Medium +6168,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (Excel)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",excel.exe,,,,,1,=,Medium +6169,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (Expression Web Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",exprwd.exe,,,,,1,=,Medium +6170,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (Groove)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",groove.exe,,,,,1,=,Medium +6171,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (Access)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",msaccess.exe,,,,,1,=,Medium +6172,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (Script Editor)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",mse7.exe,,,,,1,=,Medium +6173,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (Publisher)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",mspub.exe,,,,,1,=,Medium +6174,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (OneNote)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",onenote.exe,,,,,1,=,Medium +6175,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (Outlook)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",outlook.exe,,,,,1,=,Medium +6176,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (PowerPoint)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",powerpnt.exe,,,,,1,=,Medium +6177,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (PowerPoint Viewer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",pptview.exe,,,,,1,=,Medium +6178,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (SharePoint Designer)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",spdesign.exe,,,,,1,=,Medium +6179,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (Visio)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",visio.exe,,,,,1,=,Medium +6180,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (Project)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",winproj.exe,,,,,1,=,Medium +6181,"Office 2016 / Office 365","IE Security: Scripted Window Security Restrictions (Word)",Registry,,"HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions",winword.exe,,,,,1,=,Medium +6182,"Office 2016 / Office 365","MS Security Guide: Block Flash activation in Office documents",Registry,,"HKLM:\SOFTWARE\Microsoft\Office\Common\COM Compatibility",Comment,,,,,"Block all Flash activation",=,Medium +6185,"Office 2016 / Office 365","Restrict legacy JScript execution for Office (Excel)",Registry,,"HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE",excel.exe,,,,,69632,=,Medium +6186,"Office 2016 / Office 365","Restrict legacy JScript execution for Office (Publisher)",Registry,,"HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE",mspub.exe,,,,,69632,=,Medium +6187,"Office 2016 / Office 365","Restrict legacy JScript execution for Office (PowerPoint)",Registry,,"HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE",powerpnt.exe,,,,,69632,=,Medium +6188,"Office 2016 / Office 365","Restrict legacy JScript execution for Office (OneNote)",Registry,,"HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE",onent.exe,,,,,69632,=,Medium +6189,"Office 2016 / Office 365","Restrict legacy JScript execution for Office (Visio)",Registry,,"HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE",visio.exe,,,,,69632,=,Medium +6190,"Office 2016 / Office 365","Restrict legacy JScript execution for Office (Project)",Registry,,"HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE",winproj.exe,,,,,69632,=,Medium +6191,"Office 2016 / Office 365","Restrict legacy JScript execution for Office (Word)",Registry,,"HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE",winword.exe,,,,,69632,=,Medium +6192,"Office 2016 / Office 365","Restrict legacy JScript execution for Office (Outlook)",Registry,,"HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE",outlook.exe,,,,,69632,=,Medium +6193,"Office 2016 / Office 365","Restrict legacy JScript execution for Office (Access)",Registry,,"HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE",msaccess.exe,,,,,69632,=,Medium +6183,"Office 2016 / Office 365","Skype for Business: Configure SIP security mode",Registry,,HKLM:\software\policies\microsoft\office\16.0\lync,enablesiphighsecuritymode,,,,,1,=,Medium +6184,"Office 2016 / Office 365","Skype for Business: Disable HTTP fallback for SIP connection",Registry,,HKLM:\software\policies\microsoft\office\16.0\lync,disablehttpconnect,,,,,1,=,Medium diff --git a/lists/finding_list_msft_security_baseline_microsoft_365_apps_v2112_user.csv b/lists/finding_list_msft_security_baseline_microsoft_365_apps_v2112_user.csv new file mode 100644 index 0000000..03892ed --- /dev/null +++ b/lists/finding_list_msft_security_baseline_microsoft_365_apps_v2112_user.csv @@ -0,0 +1,154 @@ +ID,Category,Name,Method,MethodArgument,RegistryPath,RegistryItem,ClassName,Namespace,Property,DefaultValue,RecommendedValue,Operator,Severity +5000,"Office 2016 / Office 365","Microsoft Access: Block macros from running in Office files from the Internet",Registry,,HKCU:\software\policies\microsoft\office\16.0\access\security,blockcontentexecutionfrominternet,,,,,1,=,Medium +5001,"Office 2016 / Office 365","Microsoft Access: Disable Trust Bar Notification for unsigned application add-ins and block them",Registry,,HKCU:\software\policies\microsoft\office\16.0\access\security,notbpromptunsignedaddin,,,,,1,=,Medium +5002,"Office 2016 / Office 365","Microsoft Access: VBA Macro Notification Settings (Policy)",Registry,,HKCU:\software\policies\microsoft\office\16.0\access\security,vbawarnings,,,,2,3,>=,Medium +5227,"Office 2016 / Office 365","Microsoft Access: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher",Registry,,HKCU:\software\policies\microsoft\office\16.0\access\security,vbadigsigtrustedpublishers,,,,,1,=,Medium +5003,"Office 2016 / Office 365","Microsoft Access: Allow Trusted Locations on the network",Registry,,"HKCU:\software\policies\microsoft\office\16.0\access\security\trusted locations",allownetworklocations,,,,,0,=,Medium +5010,"Office 2016 / Office 365","Microsoft Excel: Do not show data extraction options when opening corrupt workbooks",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\options,extractdatadisableui,,,,,1,=,Medium +5011,"Office 2016 / Office 365","Microsoft Excel: Ask to update automatic links",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\options\binaryoptions,fupdateext_78_1,,,,,0,=,Medium +5012,"Office 2016 / Office 365","Microsoft Excel: Load pictures from Web pages not created in Excel",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\internet,donotloadpictures,,,,,1,=,Medium +5013,"Office 2016 / Office 365","Microsoft Excel: Disable AutoRepublish",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\options,disableautorepublish,,,,,1,=,Medium +5014,"Office 2016 / Office 365","Microsoft Excel: Do not show AutoRepublish warning alert",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\options,disableautorepublishwarning,,,,,0,=,Medium +5015,"Office 2016 / Office 365","Microsoft Excel: Force file extension to match file type",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security,extensionhardening,,,,,2,=,Medium +5016,"Office 2016 / Office 365","Microsoft Excel: Scan encrypted macros in Excel Open XML workbooks",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security,excelbypassencryptedmacroscan,,,,,0,=,Medium +5017,"Office 2016 / Office 365","Microsoft Excel: Turn off file validation",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\filevalidation,enableonload,,,,,1,=,Medium +5018,"Office 2016 / Office 365","Microsoft Excel: WEBSERVICE Function Notification Settings",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security,webservicefunctionwarnings,,,,,1,=,Medium +5019,"Office 2016 / Office 365","Microsoft Excel: Block macros from running in Office files from the Internet",Registry,,HKCU:\Software\Policies\Microsoft\Office\16.0\Excel\Security,blockcontentexecutionfrominternet,,,,0,1,=,Medium +5020,"Office 2016 / Office 365","Microsoft Excel: Disable Trust Bar Notification for unsigned application add-ins and block them",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security,notbpromptunsignedaddin,,,,,1,=,Medium +5021,"Office 2016 / Office 365","Microsoft Excel: VBA Macro Notification Settings (Policy)",Registry,,HKCU:\Software\Policies\Microsoft\Office\16.0\Excel\Security,vbawarnings,,,,2,3,>=,Medium +5222,"Office 2016 / Office 365","Microsoft Excel: Require that application add-ins are signed by Trusted Publisher",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security,requireaddinsig,,,,,1,=,Medium +5231,"Office 2016 / Office 365","Microsoft Excel: Prevent Excel from running XLM macros",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security,xl4macrooff,,,,,1,=,Medium +5224,"Office 2016 / Office 365","Microsoft Excel: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security,vbadigsigtrustedpublishers,,,,,1,=,Medium +5022,"Office 2016 / Office 365","Microsoft Excel: Always prevent untrusted Microsoft Query files from opening",Registry,,"HKCU:\software\policies\microsoft\office\16.0\excel\security\external content",enableblockunsecurequeryfiles,,,,0,1,=,Medium +5023,"Office 2016 / Office 365","Microsoft Excel: Don’t allow Dynamic Data Exchange (DDE) server launch in Excel",Registry,,HKCU:\Software\Microsoft\Office\16.0\Excel\Options,DDEAllowed,,,,1,1,=,Medium +5024,"Office 2016 / Office 365","Microsoft Excel: Don’t allow Dynamic Data Exchange (DDE) server lookup in Excel",Registry,,"HKCU:\software\policies\microsoft\office\16.0\excel\security\external content",disableddeserverlookup,,,,0,1,=,Medium +5025,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: dBase III / IV files",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,dbasefiles,,,,,2,=,Medium +5026,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Dif and Sylk files",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,difandsylkfiles,,,,,2,=,Medium +5027,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Excel 2 macrosheets and add-in files",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,xl2macros,,,,,2,=,Medium +5028,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Excel 2 worksheets",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,xl2worksheets,,,,,2,=,Medium +5029,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Excel 3 macrosheets and add-in files",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,xl3macros,,,,,2,=,Medium +5030,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Excel 3 worksheets",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,xl3worksheets,,,,,2,=,Medium +5031,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Excel 4 macrosheets and add-in files",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,xl4macros,,,,,2,=,Medium +5032,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Excel 4 workbooks",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,xl4workbooks,,,,,2,=,Medium +5033,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Excel 4 worksheets",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,xl4worksheets,,,,,2,=,Medium +5034,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Excel 95 workbooks",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,xl95workbooks,,,,,2,=,Medium +5035,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Excel 95-97 workbooks and templates",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,xl9597workbooksandtemplates,,,,,2,=,Medium +5036,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Excel 97-2003 workbooks and templates",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,xl97workbooksandtemplates,,,,,2,=,Medium +5037,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Set default file block behavior",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,openinprotectedview,,,,,0,=,Medium +5038,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: Web pages and Excel 2003 XML spreadsheets",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock,htmlandxmlssfiles,,,,,2,=,Medium +5039,"Office 2016 / Office 365","Microsoft Excel: Always open untrusted database files in Protected View",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview,enabledatabasefileprotectedview,,,,,1,=,Medium +5040,"Office 2016 / Office 365","Microsoft Excel: Do not open files from the Internet zone in Protected View",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview,disableinternetfilesinpv,,,,,0,=,Medium +5041,"Office 2016 / Office 365","Microsoft Excel: Do not open files in unsafe locations in Protected View",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview,disableunsafelocationsinpv,,,,,0,=,Medium +5042,"Office 2016 / Office 365","Microsoft Excel: Set document behavior if file validation fails (Open in Protected View)",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\filevalidation,disableeditfrompv,,,,,1,=,Medium +5043,"Office 2016 / Office 365","Microsoft Excel: Set document behavior if file validation fails (Allow edit in Protected View)",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\filevalidation,openinprotectedview,,,,,1,=,Medium +5044,"Office 2016 / Office 365","Microsoft Excel: Turn off Protected View for attachments opened from Outlook",Registry,,HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview,disableattachmentsinpv,,,,,0,=,Medium +5045,"Office 2016 / Office 365","Microsoft Excel: Allow Trusted Locations on the network",Registry,,"HKCU:\software\policies\microsoft\office\16.0\excel\security\trusted locations",allownetworklocations,,,,,0,=,Medium +5046,"Office 2016 / Office 365","Global Options: Disable UI extending from documents and templates (Access)",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\toolbars\access,noextensibilitycustomizationfromdocument,,,,,1,=,Medium +5047,"Office 2016 / Office 365","Global Options: Disable UI extending from documents and templates (Excel)",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\toolbars\excel,noextensibilitycustomizationfromdocument,,,,,1,=,Medium +5048,"Office 2016 / Office 365","Global Options: Disable UI extending from documents and templates (Infopath)",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\toolbars\infopath,noextensibilitycustomizationfromdocument,,,,,1,=,Medium +5049,"Office 2016 / Office 365","Global Options: Disable UI extending from documents and templates (Outlook)",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\toolbars\outlook,noextensibilitycustomizationfromdocument,,,,,1,=,Medium +5050,"Office 2016 / Office 365","Global Options: Disable UI extending from documents and templates (PowerPoint)",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\toolbars\powerpoint,noextensibilitycustomizationfromdocument,,,,,1,=,Medium +5051,"Office 2016 / Office 365","Global Options: Disable UI extending from documents and templates (Project)",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\toolbars\project,noextensibilitycustomizationfromdocument,,,,,0,=,Medium +5052,"Office 2016 / Office 365","Global Options: Disable UI extending from documents and templates (Publisher)",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\toolbars\publisher,noextensibilitycustomizationfromdocument,,,,,1,=,Medium +5053,"Office 2016 / Office 365","Global Options: Disable UI extending from documents and templates (Visio)",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\toolbars\visio,noextensibilitycustomizationfromdocument,,,,,0,=,Medium +5054,"Office 2016 / Office 365","Global Options: Disable UI extending from documents and templates (Word)",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\toolbars\word,noextensibilitycustomizationfromdocument,,,,,1,=,Medium +5070,"Office 2016 / Office 365","Security Settings: ActiveX Control Initialization",Registry,,HKCU:\software\policies\microsoft\office\common\security,uficontrols,,,,,6,=,Medium +5210,"Office 2016 / Office 365","Security Settings: Allow VBA to load typelib references by path from untrusted intranet locations",Registry,,HKCU:\software\policies\microsoft\vba\security,allowvbaintranetreferences,,,,,0,=,Medium +5071,"Office 2016 / Office 365","Security Settings: Automation Security",Registry,,HKCU:\software\policies\microsoft\office\common\security,automationsecurity,,,,,2,=,Medium +5211,"Office 2016 / Office 365","Security Settings: Control how Office handles form-based sign-in prompts",Registry,,HKCU:\software\policies\microsoft\office\16.0\common,fbabehavior,,,,,1,=,Medium +5212,"Office 2016 / Office 365","Security Settings: Control how Office handles form-based sign-in prompts (Hosts)",Registry,,HKCU:\software\policies\microsoft\office\16.0\common,fbaenabledhosts,,,,," ",=,Medium +5213,"Office 2016 / Office 365","Security Settings: Disable additional security checks on VBA library references that may refer to unsafe locations on the local machine",Registry,,HKCU:\software\policies\microsoft\vba\security,disablestrictvbarefssecurity,,,,,0,=,Medium +5072,"Office 2016 / Office 365","Security Settings: Disable all Trust Bar notifications for security issues",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\trustcenter,trustbar,,,,,0,=,Medium +5073,"Office 2016 / Office 365","Security Settings: Encryption type for password protected Office 97-2003 files",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\security,defaultencryption12,,,,,"Microsoft Enhanced RSA and AES Cryptographic Provider,AES 256,256",=,Medium +5074,"Office 2016 / Office 365","Security Settings: Encryption type for password protected Office Open XML files",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\security,openxmlencryption,,,,,"Microsoft Enhanced RSA and AES Cryptographic Provider,AES 256,256",=,Medium +5075,"Office 2016 / Office 365","Security Settings: Load Controls in Forms3",Registry,,HKCU:\software\policies\microsoft\vba\security,loadcontrolsinforms,,,,,1,=,Medium +5214,"Office 2016 / Office 365","Security Settings: Macro Runtime Scan Scope",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\security,macroruntimescanscope,,,,,2,=,Medium +5077,"Office 2016 / Office 365","Security Settings: Protect document metadata for rights managed Office Open XML Files",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\security,drmencryptproperty,,,,,1,=,Medium +5078,"Office 2016 / Office 365","Security Settings: Allow mix of policy and user locations",Registry,,"HKCU:\software\policies\microsoft\office\16.0\common\security\trusted locations","allow user locations",,,,,0,=,Medium +5079,"Office 2016 / Office 365","Security Settings: Disable the Office client from polling the SharePoint Server for published links",Registry,,HKCU:\software\policies\microsoft\office\16.0\common\portal,linkpublishingdisabled,,,,,1,=,Medium +5080,"Office 2016 / Office 365","Security Settings: Disable Smart Document's use of manifests",Registry,,"HKCU:\software\policies\microsoft\office\common\smart tag",neverloadmanifests,,,,,1,=,Medium +5090,"Office 2016 / Office 365","Microsoft Outlook: Authentication with Exchange Server",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,authenticationservice,,,,,16,=,Medium +5091,"Office 2016 / Office 365","Microsoft Outlook: Enable RPC encryption",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\rpc,enablerpcencryption,,,,,1,=,Medium +5092,"Office 2016 / Office 365","Microsoft Outlook: Do not allow Outlook object model scripts to run for public folders",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,publicfolderscript,,,,,0,=,Medium +5093,"Office 2016 / Office 365","Microsoft Outlook: Do not allow Outlook object model scripts to run for shared folders",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,sharedfolderscript,,,,,0,=,Medium +5094,"Office 2016 / Office 365","Microsoft Outlook: Use Unicode format when dragging e-mail message to file system",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\options\general,msgformat,,,,,0,=,Medium +5095,"Office 2016 / Office 365","Microsoft Outlook: Junk E-mail protection level",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail,junkmailprotection,,,,,3,=,Medium +5096,"Office 2016 / Office 365","Microsoft Outlook: Allow Active X One Off Forms",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,allowactivexoneoffforms,,,,,0,=,Medium +5097,"Office 2016 / Office 365","Microsoft Outlook: Prevent users from customizing attachment security settings",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook,disallowattachmentcustomization,,,,,1,=,Medium +5098,"Office 2016 / Office 365","Microsoft Outlook: Include Internet in Safe Zones for Automatic Picture Download",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail,internet,,,,,0,=,Medium +5100,"Office 2016 / Office 365","Microsoft Outlook: Minimum encryption settings",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,minenckey,,,,,168,=,Medium +5101,"Office 2016 / Office 365","Microsoft Outlook: Signature Warning",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,warnaboutinvalid,,,,,1,=,Medium +5102,"Office 2016 / Office 365","Microsoft Outlook: Retrieving CRLs (Certificate Revocation Lists)",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,usecrlchasing,,,,,1,=,Medium +5103,"Office 2016 / Office 365","Microsoft Outlook: Outlook Security Mode",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,adminsecuritymode,,,,,3,=,Medium +5104,"Office 2016 / Office 365","Microsoft Outlook: Allow users to demote attachments to Level 2",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,allowuserstolowerattachments,,,,,0,=,Medium +5105,"Office 2016 / Office 365","Microsoft Outlook: Display Level 1 attachments",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,showlevel1attach,,,,,0,=,Medium +5106,"Office 2016 / Office 365","Microsoft Outlook: Remove file extensions blocked as Level 1",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,fileextensionsremovelevel1,,,,,;,=,Medium +5107,"Office 2016 / Office 365","Microsoft Outlook: Remove file extensions blocked as Level 2",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,fileextensionsremovelevel2,,,,,;,=,Medium +5108,"Office 2016 / Office 365","Microsoft Outlook: Allow scripts in one-off Outlook forms",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,enableoneoffformscripts,,,,,0,=,Medium +5109,"Office 2016 / Office 365","Microsoft Outlook: Set Outlook object model custom actions execution prompt",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,promptoomcustomaction,,,,,0,=,Medium +5110,"Office 2016 / Office 365","Microsoft Outlook: Configure Outlook object model prompt when accessing an address book",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,promptoomaddressbookaccess,,,,,0,=,Medium +5111,"Office 2016 / Office 365","Microsoft Outlook: Configure Outlook object model prompt when accessing the Formula property of a UserProperty object",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,promptoomformulaaccess,,,,,0,=,Medium +5112,"Office 2016 / Office 365","Microsoft Outlook: Configure Outlook object model prompt when executing Save As",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,promptoomsaveas,,,,,0,=,Medium +5113,"Office 2016 / Office 365","Microsoft Outlook: Configure Outlook object model prompt when reading address information",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,promptoomaddressinformationaccess,,,,,0,=,Medium +5114,"Office 2016 / Office 365","Microsoft Outlook: Configure Outlook object model prompt when responding to meeting and task requests",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,promptoommeetingtaskrequestresponse,,,,,0,=,Medium +5115,"Office 2016 / Office 365","Microsoft Outlook: Configure Outlook object model prompt when sending mail",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,promptoomsend,,,,,0,=,Medium +5116,"Office 2016 / Office 365","Microsoft Outlook: Allow hyperlinks in suspected phishing e-mail messages",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail,junkmailenablelinks,,,,,0,=,Medium +5117,"Office 2016 / Office 365","Microsoft Outlook: Security setting for macros",Registry,,HKCU:\software\policies\microsoft\office\16.0\outlook\security,level,,,,,3,=,Medium +5130,"Office 2016 / Office 365","Microsoft PowerPoint: Run Programs",Registry,,HKCU:\software\policies\microsoft\office\16.0\powerpoint\security,runprograms,,,,,0,=,Medium +5131,"Office 2016 / Office 365","Microsoft PowerPoint: Scan encrypted macros in PowerPoint Open XML presentations",Registry,,HKCU:\software\policies\microsoft\office\16.0\powerpoint\security,powerpointbypassencryptedmacroscan,,,,,0,=,Medium +5132,"Office 2016 / Office 365","Microsoft PowerPoint: Turn off file validation",Registry,,HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\filevalidation,enableonload,,,,,1,=,Medium +5133,"Office 2016 / Office 365","Microsoft PowerPoint: Block macros from running in Office files from the Internet",Registry,,HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint\Security,blockcontentexecutionfrominternet,,,,0,1,=,Medium +5134,"Office 2016 / Office 365","Microsoft PowerPoint: Disable Trust Bar Notification for unsigned application add-ins and block them",Registry,,HKCU:\software\policies\microsoft\office\16.0\powerpoint\security,notbpromptunsignedaddin,,,,,1,=,Medium +5223,"Office 2016 / Office 365","Microsoft PowerPoint: Require that application add-ins are signed by Trusted Publisher",Registry,,HKCU:\software\policies\microsoft\office\16.0\powerpoint\security,requireaddinsig,,,,,1,=,Medium +5135,"Office 2016 / Office 365","Microsoft PowerPoint: VBA Macro Notification Settings (Policy)",Registry,,HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint\Security,vbawarnings,,,,2,3,>=,Medium +5225,"Office 2016 / Office 365","Microsoft PowerPoint: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher",Registry,,HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint\Security,vbadigsigtrustedpublishers,,,,,1,=,Medium +5136,"Office 2016 / Office 365","Microsoft PowerPoint: PowerPoint 97-2003 presentations, shows, templates and add-in files",Registry,,HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\fileblock,binaryfiles,,,,,2,=,Medium +5137,"Office 2016 / Office 365","Microsoft PowerPoint: Set default file block behavior",Registry,,HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\fileblock,openinprotectedview,,,,,0,=,Medium +5138,"Office 2016 / Office 365","Microsoft PowerPoint: Do not open files from the Internet zone in Protected View",Registry,,HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\protectedview,disableinternetfilesinpv,,,,,0,=,Medium +5139,"Office 2016 / Office 365","Microsoft PowerPoint: Do not open files in unsafe locations in Protected View",Registry,,HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\protectedview,disableunsafelocationsinpv,,,,,0,=,Medium +5140,"Office 2016 / Office 365","Microsoft PowerPoint: Set document behavior if file validation fails (Open in Protected View)",Registry,,HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\filevalidation,disableeditfrompv,,,,,1,=,Medium +5141,"Office 2016 / Office 365","Microsoft PowerPoint: Set document behavior if file validation fails (Allow edit in Protected View)",Registry,,HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\filevalidation,openinprotectedview,,,,,1,=,Medium +5142,"Office 2016 / Office 365","Microsoft PowerPoint: Turn off Protected View for attachments opened from Outlook",Registry,,HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\protectedview,disableattachmentsinpv,,,,,0,=,Medium +5143,"Office 2016 / Office 365","Microsoft PowerPoint: Allow Trusted Locations on the network",Registry,,"HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\trusted locations",allownetworklocations,,,,,0,=,Medium +5150,"Office 2016 / Office 365","Microsoft Project: Allow Trusted Locations on the network",Registry,,"HKCU:\software\policies\microsoft\office\16.0\ms project\security\trusted locations",allownetworklocations,,,,,0,=,Medium +5151,"Office 2016 / Office 365","Microsoft Project: Disable Trust Bar Notification for unsigned application add-ins and block them",Registry,,"HKCU:\software\policies\microsoft\office\16.0\ms project\security",notbpromptunsignedaddin,,,,,1,=,Medium +5217,"Office 2016 / Office 365","Microsoft Project: Require that application add-ins are signed by Trusted Publisher",Registry,,"HKCU:\software\policies\microsoft\office\16.0\ms project\security",requireaddinsig,,,,,1,=,Medium +5152,"Office 2016 / Office 365","Microsoft Project: VBA Macro Notification Settings (Policy)",Registry,,"HKCU:\software\policies\microsoft\office\16.0\ms project\security",vbawarnings,,,,2,3,>=,Medium +5228,"Office 2016 / Office 365","Microsoft Project: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher",Registry,,"HKCU:\software\policies\microsoft\office\16.0\ms project\security",vbadigsigtrustedpublishers,,,,,1,=,Medium +5160,"Office 2016 / Office 365","Microsoft Publisher: Publisher Automation Security Level",Registry,,HKCU:\software\policies\microsoft\office\common\security,automationsecuritypublisher,,,,,2,=,Medium +5161,"Office 2016 / Office 365","Microsoft Publisher: Disable Trust Bar Notification for unsigned application add-ins",Registry,,HKCU:\software\policies\microsoft\office\16.0\publisher\security,notbpromptunsignedaddin,,,,,1,=,Medium +5218,"Office 2016 / Office 365","Microsoft Publisher: Require that application add-ins are signed by Trusted Publisher",Registry,,HKCU:\software\policies\microsoft\office\16.0\publisher\security,requireaddinsig,,,,,1,=,Medium +5162,"Office 2016 / Office 365","Microsoft Publisher: VBA Macro Notification Settings (Policy)",Registry,,HKCU:\software\policies\microsoft\office\16.0\publisher\security,vbawarnings,,,,2,3,>=,Medium +5229,"Office 2016 / Office 365","Microsoft Publisher: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher",Registry,,HKCU:\software\policies\microsoft\office\16.0\publisher\security,vbadigsigtrustedpublishers,,,,,1,=,Medium +5170,"Office 2016 / Office 365","Microsoft Visio: Allow Trusted Locations on the network",Registry,,"HKCU:\software\policies\microsoft\office\16.0\visio\security\trusted locations",allownetworklocations,,,,,0,=,Medium +5171,"Office 2016 / Office 365","Microsoft Visio: Block macros from running in Office files from the Internet",Registry,,HKCU:\software\policies\microsoft\office\16.0\visio\security,blockcontentexecutionfrominternet,,,,,1,=,Medium +5172,"Office 2016 / Office 365","Microsoft Visio: Disable Trust Bar Notification for unsigned application add-ins and block them",Registry,,HKCU:\software\policies\microsoft\office\16.0\visio\security,notbpromptunsignedaddin,,,,,1,=,Medium +5219,"Office 2016 / Office 365","Microsoft Visio: Require that application add-ins are signed by Trusted Publisher",Registry,,HKCU:\software\policies\microsoft\office\16.0\visio\security,requireaddinsig,,,,,1,=,Medium +5173,"Office 2016 / Office 365","Microsoft Visio: VBA Macro Notification Settings (Policy)",Registry,,HKCU:\software\policies\microsoft\office\16.0\visio\security,vbawarnings,,,,2,3,>=,Medium +5230,"Office 2016 / Office 365","Microsoft Visio: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher",Registry,,HKCU:\software\policies\microsoft\office\16.0\visio\security,vbadigsigtrustedpublishers,,,,,1,=,Medium +5174,"Office 2016 / Office 365","Microsoft Visio: File Block Settings: Visio 2000-2002 Binary Drawings, Templates and Stencils",Registry,,HKCU:\software\policies\microsoft\office\16.0\visio\security\fileblock,visio2000files,,,,,2,=,Medium +5175,"Office 2016 / Office 365","Microsoft Visio: File Block Settings: Visio 2003-2010 Binary Drawings, Templates and Stencils",Registry,,HKCU:\software\policies\microsoft\office\16.0\visio\security\fileblock,visio2003files,,,,,2,=,Medium +5176,"Office 2016 / Office 365","Microsoft Visio: File Block Settings: Visio 5.0 or earlier Binary Drawings, Templates and Stencils",Registry,,HKCU:\software\policies\microsoft\office\16.0\visio\security\fileblock,visio50andearlierfiles,,,,,2,=,Medium +5190,"Office 2016 / Office 365","Microsoft Word: Turn off file validation",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\filevalidation,enableonload,,,,,1,=,Medium +5191,"Office 2016 / Office 365","Microsoft Word: Block macros from running in Office files from the Internet",Registry,,HKCU:\Software\Policies\Microsoft\Office\16.0\Word\Security,blockcontentexecutionfrominternet,,,,0,1,=,Medium +5192,"Office 2016 / Office 365","Microsoft Word: Disable Trust Bar Notification for unsigned application add-ins and block them",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security,notbpromptunsignedaddin,,,,,1,=,Medium +5220,"Office 2016 / Office 365","Microsoft Word: Dynamic Data Exchange",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security,allowdde,,,,,0,=,Medium +5221,"Office 2016 / Office 365","Microsoft Word: Require that application add-ins are signed by Trusted Publisher",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security,requireaddinsig,,,,,1,=,Medium +5193,"Office 2016 / Office 365","Microsoft Word: Scan encrypted macros in Word Open XML documents",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security,wordbypassencryptedmacroscan,,,,,0,=,Medium +5194,"Office 2016 / Office 365","Microsoft Word: VBA Macro Notification Settings (Policy)",Registry,,HKCU:\Software\Policies\Microsoft\Office\16.0\Word\Security,vbawarnings,,,,2,3,>=,Medium +5226,"Office 2016 / Office 365","Microsoft Word: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher",Registry,,HKCU:\Software\Policies\Microsoft\Office\16.0\Word\Security,vbadigsigtrustedpublishers,,,,,1,=,Medium +5195,"Office 2016 / Office 365","Microsoft Word: File Block Settings: Set default file block behavior",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock,openinprotectedview,,,,,0,=,Medium +5196,"Office 2016 / Office 365","Microsoft Word: File Block Settings: Word 2 and earlier binary documents and templates",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock,word2files,,,,,2,=,Medium +5197,"Office 2016 / Office 365","Microsoft Word: File Block Settings: Word 2000 binary documents and templates",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock,word2000files,,,,,2,=,Medium +5198,"Office 2016 / Office 365","Microsoft Word: File Block Settings: Word 2003 binary documents and templates",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock,word2003files,,,,,2,=,Medium +5199,"Office 2016 / Office 365","Microsoft Word: File Block Settings: Word 2007 and later binary documents and templates",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock,word2007files,,,,,2,=,Medium +5200,"Office 2016 / Office 365","Microsoft Word: File Block Settings: Word 6.0 binary documents and templates",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock,word60files,,,,,2,=,Medium +5201,"Office 2016 / Office 365","Microsoft Word: File Block Settings: Word 95 binary documents and templates",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock,word95files,,,,,2,=,Medium +5202,"Office 2016 / Office 365","Microsoft Word: File Block Settings: Word 97 binary documents and templates",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock,word97files,,,,,2,=,Medium +5203,"Office 2016 / Office 365","Microsoft Word: File Block Settings: Word XP binary documents and templates",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock,wordxpfiles,,,,,2,=,Medium +5204,"Office 2016 / Office 365","Microsoft Word: Do not open files from the Internet zone in Protected View",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\protectedview,disableinternetfilesinpv,,,,,0,=,Medium +5205,"Office 2016 / Office 365","Microsoft Word: Do not open files in unsafe locations in Protected View",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\protectedview,disableunsafelocationsinpv,,,,,0,=,Medium +5206,"Office 2016 / Office 365","Microsoft Word: Set document behavior if file validation fails (Open in Protected View)",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\filevalidation,disableeditfrompv,,,,,1,=,Medium +5207,"Office 2016 / Office 365","Microsoft Word: Set document behavior if file validation fails (Allow edit in Protected View)",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\filevalidation,openinprotectedview,,,,,1,=,Medium +5208,"Office 2016 / Office 365","Microsoft Word: Turn off Protected View for attachments opened from Outlook",Registry,,HKCU:\software\policies\microsoft\office\16.0\word\security\protectedview,disableattachmentsinpv,,,,,0,=,Medium +5209,"Office 2016 / Office 365","Microsoft Word: Allow Trusted Locations on the network",Registry,,"HKCU:\software\policies\microsoft\office\16.0\word\security\trusted locations",allownetworklocations,,,,,0,=,Medium diff --git a/lists/finding_list_translation.csv b/lists/finding_list_translation.csv index 82c5547..c790a50 100644 --- a/lists/finding_list_translation.csv +++ b/lists/finding_list_translation.csv @@ -1121,6 +1121,7 @@ Id,CategoryEN,NameEN,Language,Category,Name 979,"Office 2016 / Office 365","Microsoft Excel: File Block Settings: dBase III / IV files",,, 974,"Office 2016 / Office 365","Microsoft Excel: Force file extension to match file type",,, 971,"Office 2016 / Office 365","Microsoft Excel: Load pictures from Web pages not created in Excel",,, +1660,"Office 2016 / Office 365","Microsoft Excel: Prevent Excel from running XLM macros",,, 1297,"Office 2016 / Office 365","Microsoft Excel: Require that application add-ins are signed by Trusted Publisher",,, 975,"Office 2016 / Office 365","Microsoft Excel: Scan encrypted macros in Excel Open XML workbooks",,, 997,"Office 2016 / Office 365","Microsoft Excel: Set document behavior if file validation fails (Allow edit in Protected View)",,, @@ -1137,8 +1138,8 @@ Id,CategoryEN,NameEN,Language,Category,Name 1037,"Office 2016 / Office 365","Microsoft Outlook: Allow scripts in one-off Outlook forms",,, 1033,"Office 2016 / Office 365","Microsoft Outlook: Allow users to demote attachments to Level 2",,, 1019,"Office 2016 / Office 365","Microsoft Outlook: Authentication with Exchange Server",,, -1040,"Office 2016 / Office 365","Microsoft Outlook: Configure Outlook object model prompt When accessing the Formula property of a UserProperty object",,, 1039,"Office 2016 / Office 365","Microsoft Outlook: Configure Outlook object model prompt when accessing an address book",,, +1040,"Office 2016 / Office 365","Microsoft Outlook: Configure Outlook object model prompt when accessing the Formula property of a UserProperty object",,, 1041,"Office 2016 / Office 365","Microsoft Outlook: Configure Outlook object model prompt when executing Save As",,, 1042,"Office 2016 / Office 365","Microsoft Outlook: Configure Outlook object model prompt when reading address information",,, 1043,"Office 2016 / Office 365","Microsoft Outlook: Configure Outlook object model prompt when responding to meeting and task requests",,,