Title

Set the default saved file format for Access. (Cat II impact)

Discussion

By default, when users create new database files, Access 2007 saves them in the new Access 2007 format. Users can change this functionality by clicking the Office button, clicking Access Options, and then selecting a file format from the Default file format list. If a new database is created in an inappropriate format, some users might be unable to open or use it.

Check Content

The policy value for User Configuration -> Administrative Templates -> Microsoft Office Access 2007 -> Miscellaneous “Default File Format” will be set to “Enabled (Access 2007)”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\12.0\Access\Settings Criteria: If the value Default File Format is REG_DWORD = c (hex) or 12 (Decimal), this is not a finding.

Fix Text

The policy value for User Configuration -> Administrative Templates -> Microsoft Office Access 2007 -> Miscellaneous “Default File Format” will be set to “Enabled (Access 2007)”.

Additional Identifiers

Rule ID: SV-18706r2_rule

Vulnerability ID: V-17584

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.