Office Presentation Service must be removed as an option for presenting PowerPoint and Word online.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-40875	DTOO408	SV-53207r2_rule		Medium

Description
The Office Presentation Service is a free, public service that allows others to follow along in a web browser. Allowing this feature could result in presentations with DoD FOUO, PII and other protected data to be viewed in a nonsecure location. By disabling this policy, the user will not have the ability to deliver a presentation online.

STIG	Date
Microsoft Office System 2013 STIG	2017-01-04

Details

Check Text ( C-47513r3_chk )
Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Present Online >> "Remove Office Presentation Service from the list of online presentation services in PowerPoint and Word" is set to "Enabled". Use the Windows Registry Editor to navigate to the following hive: HKEY_Users For every users profile hive under HKEY_Users, navigate to the following key: \software\policies\Microsoft\office\15.0\common\broadcast If the value “disabledefaultservice” is REG_DWORD = 1 for every user profile hive, this is not a finding.

Check Text ( C-47513r3_chk )

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Present Online >> "Remove Office Presentation Service from the list of online presentation services in PowerPoint and Word" is set to "Enabled".

Use the Windows Registry Editor to navigate to the following hive:
HKEY_Users

For every users profile hive under HKEY_Users, navigate to the following key:
\software\policies\Microsoft\office\15.0\common\broadcast

If the value “disabledefaultservice” is REG_DWORD = 1 for every user profile hive, this is not a finding.

Fix Text (F-46133r1_fix)
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2013 -> Present Online -> "Remove Office Presentation Service from the list of online presentation services in PowerPoint and Word" to "Enabled".