UCF STIG Viewer Logo

Scripts associated with shared folders must be prevented from execution in Outlook.


Overview

Finding ID Version Rule ID IA Controls Severity
V-223349 O365-OU-000004 SV-223349r508019_rule Medium
Description
This policy setting controls whether Outlook executes scripts associated with custom forms or folder home pages for shared folders.
STIG Date
Microsoft Office 365 ProPlus Security Technical Implementation Guide 2021-03-22

Details

Check Text ( C-25022r442266_chk )
Verify the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for shared folders is set to "Enabled".

Use the Windows Registry to navigate to the following key:

HKCU\software\policies\microsoft\office\16.0\outlook\security

If the value for sharedfolderscript is set to REG_DWORD = 1, this is not a finding.
Fix Text (F-25010r442267_fix)
Set the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for shared folders to "Enabled".