Customer-submitted templates downloads from Office.com must be disallowed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-26631	DTOO312 - Office System	SV-34087r1_rule	ECSC-1	Medium

Description
This policy setting controls whether Office 2010 users can download templates from the community area of Office.com by clicking New on the Microsoft Office menu. If you enable this policy setting, Office 2010 users cannot download customer-submitted templates from Office.com. However, access to templates posted by Microsoft and its partners are not affected.

STIG	Date
Microsoft Office System 2010	2014-01-07

Details

Check Text ( C-34227r1_chk )
The policy value for User Configuration -> Administrative Templates -> Microsoft Office 2010 -> Tools \| Options \| General \| Web Options... “Disable customer-submitted templates downloads from Office.com” must be set to “Enabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\14.0\common\internet Criteria: If the value DisableCustomerSubmittedDownload is REG_DWORD = 1, this is not a finding.

Check Text ( C-34227r1_chk )

The policy value for User Configuration -> Administrative Templates -> Microsoft Office 2010 -> Tools | Options | General | Web Options... “Disable customer-submitted templates downloads from Office.com” must be set to “Enabled”.

Procedure: Use the Windows Registry Editor to navigate to the following key:

HKCU\Software\Policies\Microsoft\Office\14.0\common\internet

Criteria: If the value DisableCustomerSubmittedDownload is REG_DWORD = 1, this is not a finding.

Fix Text (F-29917r1_fix)
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2010 -> Tools \| Options \| General \| Web Options... “Disable customer-submitted templates downloads from Office.com” to “Enabled”.