Set custom Outlook Object Model (OOM) action execution prompt

Set custom Outlook Object Model (OOM) action execution prompt - Outlook.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-17802	DTOO247 - Outlook	SV-19030r1_rule	ECSC-1	Medium

Description
Custom actions add functionality to Outlook 2007 that can be triggered as part of a rule. Among other possible features, custom actions can be created that reply to messages in ways that circumvent the Outlook model's programmatic send protections. By default, when Outlook or another program initiates a custom action using the Outlook object model, users are prompted to allow or reject the action. If this configuration is changed, malicious code can use the Outlook object model to compromise sensitive information or otherwise cause data and computing resources to be at risk.

Description

Custom actions add functionality to Outlook 2007 that can be triggered as part of a rule. Among other possible features, custom actions can be created that reply to messages in ways that circumvent the Outlook model's programmatic send protections. By default, when Outlook or another program initiates a custom action using the Outlook object model, users are prompted to allow or reject the action. If this configuration is changed, malicious code can use the Outlook object model to compromise sensitive information or otherwise cause data and computing resources to be at risk.

STIG	Date
Microsoft Outlook 2007	2015-09-17

Details

Check Text ( C-19054r1_chk )
The policy value for User Configuration -> Administrative Templates -> Microsoft Office Outlook 2007 -> Security -> Security Form Settings -> Custom Form Security “Set Outlook object model Custom Actions execution prompt” will be set to “Enabled (Automatically Deny)”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\12.0\Outlook\Security Criteria: If the value PromptOOMCustomAction is REG_DWORD = 0, this is not a finding.

Check Text ( C-19054r1_chk )

The policy value for User Configuration -> Administrative Templates -> Microsoft Office Outlook 2007 -> Security -> Security Form Settings -> Custom Form Security “Set Outlook object model Custom Actions execution prompt” will be set to “Enabled (Automatically Deny)”.

Procedure: Use the Windows Registry Editor to navigate to the following key:

HKCU\Software\Policies\Microsoft\Office\12.0\Outlook\Security

Criteria: If the value PromptOOMCustomAction is REG_DWORD = 0, this is not a finding.

Fix Text (F-17703r1_fix)
The policy value for User Configuration -> Administrative Templates -> Microsoft Office Outlook 2007 -> Security -> Security Form Settings -> Custom Form Security “Set Outlook object model Custom Actions execution prompt” will be set to “Enabled (Automatically Deny)”.