Automatically configure user profile based on Active Directory primary SMTP address

Automatically configure user profile based on Active Directory primary SMTP address - Outlook

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-17736	DTOO278 - Outlook	SV-18916r2_rule	ECSC-1	Medium

Description
By default, if a user is joined to a domain in an Active Directory environment and does not have an e-mail account configured, Outlook 2007 populates the e-mail address field of the New Account Wizard with the primary SMTP address of the user who is currently logged on to Active Directory. The user can change the address to configure a different account, or click Next to use the default settings from Active Directory. If users are allowed to change this address, they could incorrectly configure their environment or misrepresent their identity.

Description

By default, if a user is joined to a domain in an Active Directory environment and does not have an e-mail account configured, Outlook 2007 populates the e-mail address field of the New Account Wizard with the primary SMTP address of the user who is currently logged on to Active Directory. The user can change the address to configure a different account, or click Next to use the default settings from Active Directory. If users are allowed to change this address, they could incorrectly configure their environment or misrepresent their identity.

STIG	Date
Microsoft Outlook 2007	2015-09-17

Details

Check Text ( C-19001r3_chk )
NOTE: If Outlook 2007 is configured to access DoD Enterprise Email, this check is not applicable. The policy value for User Configuration -> Administrative Templates -> Microsoft Office Outlook 2007 -> Tools \ Account Settings -> Exchange “Automatically configure profile based on Active Directory Primary SMTP address” will be set to “Enabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\12.0\Outlook\AutoDiscover Criteria: If the value ZeroConfigExchange is REG_DWORD = 1, this is not a finding.

Check Text ( C-19001r3_chk )

NOTE: If Outlook 2007 is configured to access DoD Enterprise Email, this check is not applicable.

The policy value for User Configuration -> Administrative Templates -> Microsoft Office Outlook 2007 -> Tools \ Account Settings -> Exchange “Automatically configure profile based on Active Directory Primary SMTP address” will be set to “Enabled”.

Procedure: Use the Windows Registry Editor to navigate to the following key:

HKCU\Software\Policies\Microsoft\Office\12.0\Outlook\AutoDiscover

Criteria: If the value ZeroConfigExchange is REG_DWORD = 1, this is not a finding.

Fix Text (F-17635r1_fix)
The policy value for User Configuration -> Administrative Templates -> Microsoft Office Outlook 2007 -> Tools \ Account Settings -> Exchange “Automatically configure profile based on Active Directory Primary SMTP address” will be set to “Enabled”.