Save files default format must be configured.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-17521	DTOO139 - Excel	SV-33437r1_rule		Medium

Description
When users create new Excel files, Excel 2010 saves them in the new *.xlsx format. Ensure this setting is enabled to specify all new files are created in Excel 2010. If a new file is created in an earlier format, some users may not be able to open or use the file, or they may choose a format this is less secure than the Excel 2010 format. Users can still select a specific format when they save files, but they cannot change default of this setting from the Excel Options dialog box. This enforced user behavior ensures any change to the file format requires additional deliberate user interaction.

Description

When users create new Excel files, Excel 2010 saves them in the new *.xlsx format. Ensure this setting is enabled to specify all new files are created in Excel 2010. If a new file is created in an earlier format, some users may not be able to open or use the file, or they may choose a format this is less secure than the Excel 2010 format. Users can still select a specific format when they save files, but they cannot change default of this setting from the Excel Options dialog box. This enforced user behavior ensures any change to the file format requires additional deliberate user interaction.

STIG	Date
Microsoft Excel 2010	2018-04-04

Details

Check Text ( C-33920r1_chk )
The policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2010 -> Excel Options -> Save "default file format" must be set to "Enabled (Excel Workbook *.xlsx)". Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\14.0\excel\options Criteria: If the value DefaultFormat is REG_DWORD = 0x00000033(hex) or 51 (Decimal), this is not a finding.

Check Text ( C-33920r1_chk )

The policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2010 -> Excel Options -> Save "default file format" must be set to "Enabled (Excel Workbook *.xlsx)".

Procedure: Use the Windows Registry Editor to navigate to the following key:

HKCU\Software\Policies\Microsoft\Office\14.0\excel\options

Criteria: If the value DefaultFormat is REG_DWORD = 0x00000033(hex) or 51 (Decimal), this is not a finding.

Fix Text (F-29609r1_fix)
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2010 -> Excel Options -> Save "default file format" to "Enabled (Excel Workbook *.xlsx)".