Open/Save actions for dBase III / IV files must be blocked.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-26595	DTOO122 - Excel	SV-34230r1_rule	ECSC-1	Medium

Description
This policy setting allows for determining whether users can open, view, edit, or save Excel files with the format specified by the title.

STIG	Date
Microsoft Excel 2010	2012-10-02

Details

Check Text ( C-34194r1_chk )
The policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2010 -> Excel Options -> Security -> Trust Center -> File Block Settings “dBase III / IV files” must be “Enabled: Open/Save blocked, use open policy". Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\14.0\excel\security\fileblock Criteria: If the value DBaseFiles is REG_DWORD = 2, this is not a finding.

Check Text ( C-34194r1_chk )

The policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2010 -> Excel Options -> Security -> Trust Center -> File Block Settings “dBase III / IV files” must be “Enabled: Open/Save blocked, use open policy".

Procedure: Use the Windows Registry Editor to navigate to the following key:

HKCU\Software\Policies\Microsoft\Office\14.0\excel\security\fileblock

Criteria: If the value DBaseFiles is REG_DWORD = 2, this is not a finding.

Fix Text (F-29888r1_fix)
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2010 -> Excel Options -> Security -> Trust Center -> File Block Settings “dBase III / IV files” to “Enabled: Open/Save blocked, use open policy".