Check: O365-OU-000005
Microsoft Office 365 ProPlus STIG:
O365-OU-000005
(in versions v2 r11 through v1 r2)
Title
Files dragged from an Outlook e-mail to the file system must be created in ANSI format. (Cat II impact)
Discussion
This policy setting controls whether e-mail messages dragged from Outlook to the file system are saved in Unicode or ANSI format.
Check Content
Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Use Unicode format when dragging e-mail message to file system is set to "Disabled". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\options\general If the value for msgformat is set to REG_DWORD = 0, this is not a finding.
Fix Text
Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Use Unicode format when dragging e-mail message to file system to "Disabled".
Additional Identifiers
Rule ID: SV-223350r879887_rule
Vulnerability ID: V-223350
Group Title: SRG-APP-000516
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |