Office Presentation Service must be removed as an option for presenting PowerPoint and Word online.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-228538	DTOO408	SV-228538r508020_rule		Medium

Description
The Office Presentation Service is a free, public service that allows others to follow along in a web browser. Allowing this feature could result in presentations with DoD FOUO, PII and other protected data to be viewed in a nonsecure location. By disabling this policy, the user will not have the ability to deliver a presentation online.

STIG	Date
Microsoft Office System 2013 Security Technical Implementation Guide	2020-09-25

Details

Check Text ( C-30771r498892_chk )
Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Present Online >> "Remove Office Presentation Service from the list of online presentation services in PowerPoint and Word" is set to "Enabled". Use the Windows Registry Editor to navigate to the following HKCU\Software\Policies\Microsoft\Office\15.0\common\broadcast If the value 'disabledefaultservice' is REG_DWORD = 1, this is not a finding.

Check Text ( C-30771r498892_chk )

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Present Online >> "Remove Office Presentation Service from the list of online presentation services in PowerPoint and Word" is set to "Enabled".

Use the Windows Registry Editor to navigate to the following HKCU\Software\Policies\Microsoft\Office\15.0\common\broadcast

If the value 'disabledefaultservice' is REG_DWORD = 1, this is not a finding.

Fix Text (F-30756r498893_fix)
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2013 -> Present Online -> "Remove Office Presentation Service from the list of online presentation services in PowerPoint and Word" to "Enabled".