The Save commands default file format must be configured.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-17521	DTOO139	SV-53726r1_rule		Medium

Description
When users create new Excel files, Excel 2013 saves them in the new *.xlsx format. Ensure this setting is enabled to specify all new files are created in Excel 2013. If a new file is created in an earlier format, some users may not be able to open or use the file, or they may choose a format that is less secure than the Excel 2013 format. Users can still select a specific format when they save files, but they cannot change the default of this setting from the "Excel Options" dialog box. This enforced user behavior ensures any change to the file format requires additional deliberate user interaction.

Description

When users create new Excel files, Excel 2013 saves them in the new *.xlsx format. Ensure this setting is enabled to specify all new files are created in Excel 2013. If a new file is created in an earlier format, some users may not be able to open or use the file, or they may choose a format that is less secure than the Excel 2013 format. Users can still select a specific format when they save files, but they cannot change the default of this setting from the "Excel Options" dialog box. This enforced user behavior ensures any change to the file format requires additional deliberate user interaction.

STIG	Date
Microsoft Excel 2013 STIG	2018-04-03

Details

Check Text ( C-47812r1_chk )
Verify the policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2013 -> Excel Options -> Save "default file format" is set to "Enabled (Excel Workbook *.xlsx)". Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\15.0\excel\options Criteria: If the value DefaultFormat is REG_DWORD = 0x00000033(hex) or 51 (Decimal), this is not a finding.

Check Text ( C-47812r1_chk )

Verify the policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2013 -> Excel Options -> Save "default file format" is set to "Enabled (Excel Workbook *.xlsx)".

Procedure: Use the Windows Registry Editor to navigate to the following key:

HKCU\Software\Policies\Microsoft\Office\15.0\excel\options

Criteria: If the value DefaultFormat is REG_DWORD = 0x00000033(hex) or 51 (Decimal), this is not a finding.

Fix Text (F-46635r1_fix)
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2013 -> Excel Options -> Save "default file format" to "Enabled (Excel Workbook *.xlsx)".