Disable the Information Rights Management feature for InfoPath.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-17646	DTOO174 - InfoPath	SV-18793r1_rule	ECSC-1	Medium

Description
By default, users can use Information Rights Management (IRM) in InfoPath 2007 to create forms that have restricted permission for specific people who will access the form. By using IRM, users can help prevent sensitive information from being printed, forwarded, or copied by unauthorized people.

STIG	Date
Microsoft InfoPath 2007	2015-10-02

Details

Check Text ( C-18921r1_chk )
The policy value for User Configuration -> Administrative Templates -> Microsoft Office InfoPath 2007 -> Restricted Features “Information Rights Management” will be set to “Disabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\12.0\InfoPath\Designer\RestrictedFeatures Criteria: If the value IRMAllowed is REG_DWORD = 1, this is not a finding.

Check Text ( C-18921r1_chk )

The policy value for User Configuration -> Administrative Templates -> Microsoft Office InfoPath 2007 -> Restricted Features “Information Rights Management” will be set to “Disabled”.

Procedure: Use the Windows Registry Editor to navigate to the following key:

HKCU\Software\Policies\Microsoft\Office\12.0\InfoPath\Designer\RestrictedFeatures

Criteria: If the value IRMAllowed is REG_DWORD = 1, this is not a finding.

Fix Text (F-17548r1_fix)
The policy value for User Configuration -> Administrative Templates -> Microsoft Office InfoPath 2007 -> Restricted Features “Information Rights Management” will be set to “Disabled”.