Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Do not allow Active X One-Off forms to be used in Outlook.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-17559 | DTOO234 - Outlook | SV-18657r1_rule | ECSC-1 | Medium |
| Description |
|---|
| By default, third-party ActiveX controls are not allowed to run in one-off forms in Outlook. You can change this behavior so that Safe Controls (Microsoft Forms 2.0 controls and the Outlook Recipient and Body controls) are allowed in one-off forms, or so that all ActiveX controls are allowed to run. |
| STIG | Date |
|---|---|
| Microsoft Outlook 2007 | 2014-10-03 |
Details
| Check Text ( C-18860r1_chk ) |
|---|
| The policy value for User Configuration -> Administrative Templates -> Microsoft Office Outlook 2007 -> Security “Allow Active X One Off Forms” will be set to “Disabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\12.0\Outlook\Security\AllowActiveXOneOffForms If the Registry key exists, this is a finding. |
| Fix Text (F-17475r1_fix) |
|---|
| The policy value for User Configuration -> Administrative Templates -> Microsoft Office Outlook 2007 -> Security “Allow Active X One Off Forms” will be set to “Disabled”. |