Title

Users must be prevented from using or inserting apps that come from the Office Store. (Cat II impact)

Discussion

This policy setting allows users to be prevented from using or inserting apps that come from the Office Store. If this policy setting is enabled, apps from the Office Store are blocked. If this policy setting is disabled or not configured, apps from the Office Store are allowed, unless the "Block Apps for Office" policy setting is enabled.

Check Content

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Security Settings >> Trust Center >> Trusted Catalogs "Block the Office Store" is set to "Enabled". Use the Windows Registry Editor to navigate to the following HKCU\Software\Policies\Microsoft\Office\15.0\wef\trustedcatalogs If the value 'disableomexcatalogs' is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Security Settings >> Trust Center >> Trusted Catalogs "Block the Office Store" to "Enabled".

Additional Identifiers

Rule ID: SV-228553r508020_rule

Vulnerability ID: V-228553

Group Title: SRG-APP-000131

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.