UCF STIG Viewer Logo

Store macro in Personal macro Workbook by default - Excel.


Overview

Finding ID Version Rule ID IA Controls Severity
V-17804 DTOO145 - Excel SV-19034r1_rule ECSC-1 Medium
Description
The Record Macro dialog box includes a drop-down menu that allows users to choose whether to store the new macro in the current workbook, a new workbook, or their personal macro workbook (Personal.xlsb), a hidden workbook that opens every time Excel 2007 starts. By default, Excel displays the Record Macro dialog box with This Workbook already selected in the drop-down menu. If a user saves a macro in the active workbook and then distributes the workbook to others, the macro is distributed along with the workbook, which could put workbook data at risk if the macro is triggered accidentally or intentionally.
STIG Date
Microsoft Excel 2007 2015-10-02

Details

Check Text ( C-19060r1_chk )
The policy value for User Configuration -> Administrative Templates -> Microsoft Office Excel 2007 -> Excel Options -> Security -> Trust Center “Store macro in Personal Macro Workbook by default” will be set to “Enabled”.

Procedure: Use the Windows Registry Editor to navigate to the following key:

HKCU\Software\Policies\Microsoft\Office\12.0\Excel\Options\BinaryOptions

Criteria: If the value fGlobalSheet_37_1 is REG_DWORD = 1, this is not a finding.
Fix Text (F-17705r1_fix)
The policy value for User Configuration -> Administrative Templates -> Microsoft Office Excel 2007 -> Excel Options -> Security -> Trust Center “Store macro in Personal Macro Workbook by default” will be set to “Enabled”.

Procedure: Use the Windows Registry Editor to navigate to the following key:

HKCU\Software\Policies\Microsoft\Office\12.0\Excel\Options\BinaryOptions

Criteria: If the value fGlobalSheet_37_1 is REG_DWORD = 1, this is not a finding.