Title

Disable the "do not allow creating, replying or forwarding of signatures' feature - Outlook (Cat II impact)

Discussion

By default, Outlook 2007 users can create and use signatures in e-mail messages. Users can add signatures to messages manually, and can also configure Outlook to automatically append signatures to new messages, to replies and forwards, or to all three. Signatures typically include details such as the user's name, title, phone numbers, and office location. If your organization has policies that govern the distribution of this kind of information, using signatures might cause some users to inadvertently violate these policies.

Check Content

The policy value for User Configuration -> Administrative Templates -> Microsoft Office Outlook 2007 -> Tools \ Options -> Mail format “Do not allow creating, replying, or forwarding signatures for e-mail messages” will be set to “Disabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\12.0\Common\MailSettings Criteria: If the value DisableSignatures is REG_DWORD = 0, this is not a finding.

Fix Text

The policy value for User Configuration -> Administrative Templates -> Microsoft Office Outlook 2007 -> Tools \ Options -> Mail format “Do not allow creating, replying, or forwarding signatures for e-mail messages” will be set to “Disabled”.

Additional Identifiers

Rule ID: SV-18842r1_rule

Vulnerability ID: V-17673

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.