None Computing title DISA Gold Disk - Microsoft Access 2007 version v0.0 releaseinfo Release: Vuln_Num Security_Options Rule_ID DTOO104___Disable_user_name_and_password_18177 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for Computer Configuration -> Administrative Templates -> Microsoft Office 2007 system (Machine) -> Security Settings -> IE Security “Disable user name and password” Set to “Enabled” and ‘msaccess.exe’ check box. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO104___Disable_user_name_and_password_19429 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for Computer Configuration -> Administrative Templates -> Microsoft Office 2007 system (Machine) -> Security Settings -> IE Security “Disable user name and password” Set to “Enabled” and ‘msaccess.exe’ check box. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO111___Enable_IE_Bind_to_Object__18184 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO111___Enable_IE_Bind_to_Object__18190 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for Computer Configuration -> Administrative Templates -> Microsoft Office 2007 system (Machine) -> Security Settings -> IE Security “Bind to Object” will be set to “Enabled” and ‘msaccess.exe’ is checked. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO117___Saved_from_URL_18191 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO117___Saved_from_URL_18205 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for Computer Configuration -> Administrative Templates -> Microsoft Office 2007 system (Machine) -> Security Settings -> IE Security “Saved from URL” will be set to “Enabled” and ‘msaccess.exe’ is checked. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO123_Block_Navigation_to_URL_from_Office__18206 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO123_Block_Navigation_to_URL_from_Office__18603 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for Computer Configuration -> Administrative Templates -> Microsoft Office 2007 system (Machine) -> Security Settings -> IE Security “Navigate URL” will be set to “Enabled” and ‘msaccess.exe’ is checked. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO129___Block_Pop_Ups_18209 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO129___Block_Pop_Ups_18215 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for Computer Configuration -> Administrative Templates -> Microsoft Office 2007 system (Machine) -> Security Settings -> IE Security “Block popups” will be set to “Enabled” and ‘msaccess.exe’ is checked. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO131___Disable_Trust_Bar_Notification_for_unsig_18218 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO131___Disable_Trust_Bar_Notification_for_unsig_18219 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for User Configuration -> Administrative Templates -> Microsoft Office Access 2007 -> Application Settings -> Security -> Trust Center “Disable Trust Bar Notification for unsigned application add-ins” will be set to “Enabled”. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO133_Disable_all_trusted_locations__18527 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO133_Disable_all_trusted_locations__18528 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for User Configuration -> Administrative Templates -> Microsoft Office Access 2007 -> Application Settings -> Security -> Trust Center -> Trusted Locations “Disable all trusted locations” will be set to “Enabled”. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO134___Disable__Allow_trusted_locations___18596 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO134___Disable__Allow_trusted_locations___18597 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for User Configuration -> Administrative Templates -> Microsoft Office Access 2007 -> Application Settings -> Security -> Trust Center -> Trusted Locations “Allow Trusted Locations not on the computer” will be set to “Disabled”. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO304___VBA_Macro_Warning_settings_18635 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO304___VBA_Macro_Warning_settings_18637 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for User Configuration -> Administrative Templates -> Microsoft Office Access 2007 -> Application Settings -> Security -> Trust Center “VBA Macro Warning Settings” will be set to “Enabled (Trust Bar warning for all macros)”. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO191_ActiveX_Control_Initialization_for_Office_18642 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO196_Mix_of_Policy_and_User_Locations___Office_18658 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO213___Block_Office_Update_site_Updates_18668 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO212___Control_Blogging__18700 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO200___Allow_users_to_read_with_browsers_18704 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO136___Default_file_format___Access_18705 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO136___Default_file_format___Access_18706 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for User Configuration -> Administrative Templates -> Microsoft Office Access 2007 -> Miscellaneous “Default File Format” will be set to “Enabled (Access 2007)”. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO177_Disable_Updates_from_Office_Online_Site_18713 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO186___Trust_Bar_Notifications_18716 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO137___Do_Not_Prompt___Convert_Old_DB___Access_18732 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO137___Do_Not_Prompt___Convert_Old_DB___Access_18733 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for User Configuration -> Administrative Templates -> Microsoft Office Access 2007 -> Miscellaneous “No prompt to convert older databases” will be set to “Disabled”. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO184___Cust__Experience_Imprvmnt_Pgm____Office__18746 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO190___Encr__type_on_Pwd__Prot__older_files_18754 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO189___Encr__Type___Pwd__Prot__Open_XML_files__18757 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO182___Improve_Proofing_Tools___Office_18768 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO205___Disable_Check_for_Solutions___Office_18801 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO194___Disable_hyperlink_warnings___Office_18813 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO206___Incl__Doc__properties_for_PDF_and_XPS_18815 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO183___Disable_Opt_In_Wizard_on_first_run__18823 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO208_Disable_Ofc__client_from_polling_Ofc__Svr__18835 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO201___Always_req__connection_to_verify_perms_18905 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO185___No_Auto_receive_sm__updates___Office_18921 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO203___Legacy_Format_signatures___Office_18936 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO192___Load_controls_in_forms3___Office_18938 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTO135___Modal_Trust_Decision_Only___Access_18951 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTO135___Modal_Trust_Decision_Only___Access_18952 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for User Configuration -> Administrative Templates -> Microsoft Office Access 2007 -> Tools \ Security “Modal Trust Decision Only” will be set to “Disabled”. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO179___Open_as_Read_Write_when_browsing__Office_18955 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO199___Prevent_perms_chg__on_rights_content_18967 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO188___Protect_doc__metadata___Office_18973 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO187___Protect_metadata___rights_managed_docs_18975 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO180___Don_t_Rely_on_VML___IE_graphics__Office_18982 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO130___Underline_Hyperlinks___Access_19045 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text Generic Desktop Fix. Not_Reviewed Vuln_Num Security_Options Rule_ID DTOO130___Underline_Hyperlinks___Access_19046 Severity medium Rule_Title Vuln_Discuss Check_Content Fix_Text The policy value for User Configuration -> Administrative Templates -> Microsoft Office Access 2007 -> Application Settings -> Web Options -> General “Underline Hyperlinks” will be set to “Enabled”. Not_Reviewed