Title

Ask user to update automatic links instead of automatically updating spreadsheet - Excel. (Cat II impact)

Discussion

If an Excel 2007 workbook contains links to other documents and users are not prompted to approve them, the contents of the workbook might change without the users' knowledge because the linked files have changed. By default, users are prompted to update automatic links.

Check Content

The policy value for User Configuration -> Administrative Templates -> Microsoft Office Excel 2007 -> Excel Options -> Advanced “Ask to update automatic links” will be set to “Enabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\12.0\Excel\Options\BinaryOptions Criteria: If the value fUpdateExt_78_1 is REG_DWORD = 0, this is not a finding.

Fix Text

The policy value for User Configuration -> Administrative Templates -> Microsoft Office Excel 2007 -> Excel Options -> Advanced “Ask to update automatic links” will be set to “Enabled”.

Additional Identifiers

Rule ID: SV-18908r1_rule

Vulnerability ID: V-17732

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.