The Office Telemetry Agent must be configured to obfuscate the file name, file path, and title of Office documents before uploading telemetry data to the shared folder.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-40886	DTOO416	SV-53218r3_rule		Medium

Description
This policy setting configures the Office Telemetry Agent to disguise, or obfuscate, certain file properties that are reported in telemetry data. If this policy setting is enabled, Office Telemetry Agent obfuscates the file name, file path, and title of Office documents before uploading telemetry data to the shared folder. If this policy setting is disabled or not configured, the Office Telemetry Agent uploads telemetry data that shows the full file name, file path, and title of all Office documents.

Description

This policy setting configures the Office Telemetry Agent to disguise, or obfuscate, certain file properties that are reported in telemetry data. If this policy setting is enabled, Office Telemetry Agent obfuscates the file name, file path, and title of Office documents before uploading telemetry data to the shared folder. If this policy setting is disabled or not configured, the Office Telemetry Agent uploads telemetry data that shows the full file name, file path, and title of all Office documents.

STIG	Date
Microsoft Office System 2013 STIG	2018-03-19

Details

Check Text ( C-47525r4_chk )
Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Telemetry Dashboard >> "Turn on privacy setting in Office Telemetry Agent" is set to "Enabled". Use the Windows Registry Editor to navigate to the following hive: HKEY_Users For every users profile hive under HKEY_Users, navigate to the following key: \software\policies\Microsoft\office\15.0\osm If the value “enablefileobfuscation” for every user profile hive is REG_DWORD = 1, this is not a finding.

Check Text ( C-47525r4_chk )

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Telemetry Dashboard >> "Turn on privacy setting in Office Telemetry Agent" is set to "Enabled".

Use the Windows Registry Editor to navigate to the following hive:
HKEY_Users

For every users profile hive under HKEY_Users, navigate to the following key:
\software\policies\Microsoft\office\15.0\osm

If the value “enablefileobfuscation” for every user profile hive is REG_DWORD = 1, this is not a finding.

Fix Text (F-46145r2_fix)
Set the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Telemetry Dashboard >> "Turn on privacy setting in Office Telemetry Agent" to "Enabled".