Title

The Default file format must be set. (Cat II impact)

Discussion

When users create new database files, Access saves them in the new Access format. Users can change this functionality by clicking the Office button, clicking Access Options, and then selecting a file format from the Default file format list. If a new database is created in an inappropriate format, some users might be unable to open or use it.

Check Content

The policy value for User Configuration -> Administrative Templates -> Microsoft Access 2010 -> Miscellaneous “Default File Format” must be set to “Enabled (Access 2007)”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\14.0\access\settings Criteria: If the value Default File Format is REG_DWORD = 0x0000000c (hex) or 12 (Decimal), this is not a finding.

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Access 2010 -> Miscellaneous “Default File Format” to “Enabled (Access 2007)”.

Additional Identifiers

Rule ID: SV-33430r1_rule

Vulnerability ID: V-17584

Group Title: DTOO136 - Default file format

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.