← Back to Microsoft Office System 2016 Security Technical Implementation Guide

V-238037

CAT II (Medium)

Encrypt document properties must be configured for OLE documents.

Rule ID

SV-238037r961602_rule

STIG

Microsoft Office System 2016 Security Technical Implementation Guide

Version

V2R5

CCIs

CCI-002476

Discussion

This policy setting allows you configure if the document properties are encrypted. This applies to OLE documents (Office 97-2003 compatible) if the application is configured for CAPI RC4. If you enable this policy setting, the document properties will be encrypted. If you disable or do not configure this policy setting, the document properties will not be encrypted.

Check Content

Verify the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2016 -> Security Settings "Encrypt document properties" is set to "Enabled". 

Procedure: Use the Windows Registry Editor to navigate to the following key: 

HKCU\Software\Policies\Microsoft\Office\16.0\common\security

Criteria: If the value EncryptDocProps is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2016 -> Security Settings "Encrypt document properties" to "Enabled".