Enable Warning Bar settings for VBA macros contained in Excel Files.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-17545	DTOO304 - Excel	SV-18638r1_rule	ECSC-1	Medium

Description
By default, when users open files in the specified applications that contain VBA macros, the applications open the files with the macros disabled and display the Trust Bar with a warning that macros are present and have been disabled. Users can inspect and edit the files if appropriate, but cannot use any disabled functionality until they enable it by clicking Options on the Trust Bar and selecting the appropriate action. If users enable dangerous macros, it could affect their computers or cause sensitive information to be compromised.

Description

By default, when users open files in the specified applications that contain VBA macros, the applications open the files with the macros disabled and display the Trust Bar with a warning that macros are present and have been disabled. Users can inspect and edit the files if appropriate, but cannot use any disabled functionality until they enable it by clicking Options on the Trust Bar and selecting the appropriate action. If users enable dangerous macros, it could affect their computers or cause sensitive information to be compromised.

STIG	Date
Microsoft Excel 2007	2014-01-07

Details

Check Text ( C-18855r1_chk )
The policy value for User Configuration -> Administrative Templates -> Microsoft Office Excel 2007 -> Excel Options -> Security -> Trust Center “VBA macro warning settings” will be set to “Enabled (Trust Bar warning for all macros)”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\12.0\Excel\Security Criteria: If the value VBAWarnings is REG_DWORD = 2, this is not a finding.

Check Text ( C-18855r1_chk )

The policy value for User Configuration -> Administrative Templates -> Microsoft Office Excel 2007 -> Excel Options -> Security -> Trust Center “VBA macro warning settings” will be set to “Enabled (Trust Bar warning for all macros)”.

Procedure: Use the Windows Registry Editor to navigate to the following key:

HKCU\Software\Policies\Microsoft\Office\12.0\Excel\Security

Criteria: If the value VBAWarnings is REG_DWORD = 2, this is not a finding.

Fix Text (F-17466r1_fix)
The policy value for User Configuration -> Administrative Templates -> Microsoft Office Excel 2007 -> Excel Options -> Security -> Trust Center “VBA macro warning settings” will be set to “Enabled (Trust Bar warning for all macros)”.