Title

The Save commands default file format must be configured. (Cat III impact)

Discussion

When users create new database files, Access saves them in the new Access format. Users can change this functionality by clicking the Office button, clicking "Access Options", and then selecting a file format from the default file format list. If a new database is created in an inappropriate format, some users might be unable to open or use it.

Check Content

Verify the policy value for User Configuration -> Administrative Templates -> Microsoft Access 2013 -> Miscellaneous "Default File Format" is set to "Enabled (Access 2007)". Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\15.0\access\settings Criteria: If the value Default File Format is REG_DWORD = 0x0000000c (hex) or 12 (Decimal), this is not a finding.

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Access 2013 -> Miscellaneous "Default File Format" to "Enabled (Access 2007)".

Additional Identifiers

Rule ID: SV-52772r1_rule

Vulnerability ID: V-17584

Group Title: DTOO136 - Default file format

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.