Docstoc

Microsoft Office Templates Online Old v4

Document Sample
Microsoft Office Templates Online Old v4 Powered By Docstoc
					            Old v4 CCE                                        CCE
  CCE Id                     CCE Definition
                 Id                                        Parameters




                         The "Disable VBA for
                         Office applications" setting
                         should be configured
CCE-116-4   CCE-116      correctly.                   enabled/disabled




                                                         1 = Do not prompt | 4
                                                         = Prompt user to use
                         The "ActiveX Control            control defaults | 6 =
                         Initialization:" setting should Prompt user to use
CCE-908-4   CCE-908      be configured correctly.        persisted data

                         The "Enable Customer
                         Experience Improvement
                         Program" setting should be
CCE-184-2   CCE-184      configured correctly.      enabled/disabled

                         The "Enable Customer
                         Experience Improvement
                         Program" setting should be
CCE-276-6   CCE-276      configured correctly.      enabled/disabled
                                                    0 = Never show
                                                    online content or
                                                    entry points | 1 =
                                                    Search only offline
                                                    content whenever
                                                    available | 2 =
                         The "Online content        Search online
                         options" setting should be content whenever
CCE-967-0   CCE-967      configured correctly.      available
                                                  1 = No Security
                                                  checks for macros |
                                                  2 = Trust Bar
                                                  warning for all
                                                  macros | 3 = Trust
                                                  Bar warning for
                                                  digitally signed
                      The "VBA Macro Warning macros only | 4 = No
                      Settings" setting should be Warnings for all
                      configured correctly for    macros but disable
CCE-427-5   CCE-427   Access 2007.                all macros

                                                  1 = No Security
                                                  checks for macros |
                                                  2 = Trust Bar
                                                  warning for all
                                                  macros | 3 = Trust
                                                  Bar warning for
                                                  digitally signed
                      The "VBA Macro Warning macros only | 4 = No
                      Settings" setting should be Warnings for all
                      configured correctly for    macros but disable
CCE-649-4   CCE-649   Excel 2007.                 all macros




                      The "Trust access to Visual
                      Basic Project" setting
                      should be configured
                      correctly for Excel 2007
CCE-862-3   CCE-862   and 2003.                   enabled/disabled
                                                  1 = No Security
                                                  checks for macros |
                                                  2 = Trust Bar
                                                  warning for all
                                                  macros | 3 = Trust
                                                  Bar warning for
                                                  digitally signed
                      The "VBA Macro Warning macros only | 4 = No
                      Settings" setting should be Warnings for all
                      configured correctly for    macros but disable
CCE-567-8   CCE-567   PowerPoint 2007.            all macros

                      The "Trust access to Visual
                      Basic Project" setting
                      should be configured
                      correctly for PowerPoint
CCE-68-7    CCE-68    2007.                       enabled/disabled


                      The "Disable Remember
                      Password" setting should
CCE-537-1   CCE-537   be configured correctly.    enabled/disabled

                                                  0 = Trust all or use
                                                  Exchange settings if
                                                  present | 1 = Trust
                                                  all loaded and
                                                  installed COM
                                                  addins | 2 = Do
                      The "Configure Add-In       NOT trust loaded
                      Trust Level" setting should and installed COM
CCE-786-4   CCE-786   be configured correctly.    addins
                      The "Disable 'Remember
                      password' for Internet e-
                      mail accounts" setting
                      should be configured
CCE-937-3   CCE-937   correctly.                  enabled/disabled



                      The "Minimum encryption
                      settings" setting should be
CCE-13-3    CCE-13    configured correctly.       enabled/disabled

                      The "Do not check e-mail
                      address against address of
                      certificates being using"
                      setting should be
CCE-316-0   CCE-316   configured correctly.      enabled/disabled
                      The "Send all signed
                      messages as clear signed
                      messages" setting should
CCE-14-1    CCE-14    be configured correctly.   enabled/disabled

                      The "Request an S/MIME
                      receipt for all S/MIME
                      signed messages" setting
                      should be configured
CCE-153-7   CCE-153   correctly.                 enabled/disabled




                      The "Do not display
                      'Publish to GAL' button"
                      setting should be
CCE-345-9   CCE-345   configured correctly.      enabled/disabled




                                                 0 = Let user decide if
                                                 they want to be
                                                 warned | 1 = Always
                                                 warn about invalid
                      The "Signature Warning"    signatures | 2 =
                      setting should be          Never warn about
CCE-700-5   CCE-700   configured correctly.      invalid signatures
                      The "Enable Cryptography
                      Icons" setting should be
CCE-695-7   CCE-695   configured correctly.    enabled/disabled


                                                  0 = Use system
                                                  Default | 1 = When
                      The "Retrieving CRLs        online always
                      (Certificate Revocation     retreive the CRL | 2
                      Lists)" setting should be   = Never retreive the
CCE-395-4   CCE-395   configured correctly.       CRL
                                                  1 = No Security
                                                  checks for macros |
                                                  2 = Trust Bar
                                                  warning for all
                                                  macros | 3 = Trust
                                                  Bar warning for
                                                  digitally signed
                      The "VBA Macro Warning macros only | 4 = No
                      Settings" setting should be Warnings for all
                      configured correctly for    macros but disable
CCE-659-3   CCE-659   Word 2007.                  all macros




                      The "Trust access to Visual
                      Basic Project" setting
                      should be configured
                      correctly for Word 2007
CCE-703-9   CCE-703   and 2003.                   enabled/disabled
                        The "Warn before printing,
                        saving or sending a file that
                        contains tracked changes
                        or comments" setting
                        should be configured
CCE-173-5    CCE-173    correctly.                    enabled/disabled

                        The "Block updates from
                        the Office Update Site from
                        applying" setting should be
CCE-784-9    CCE-784    configured correctly.          enabled/disabled
                        The "Underline hyperlinks"     enabled/disabled
                        setting should be
                        configured correctly for
CCE-1395-3   CCE-1395   Access 2007.
                        The "Number of                 enabled/disabled
                        documents in the Recent
                        Documents list (0-9)"
                        setting should be
                        configured correctly for
CCE-1137-9   CCE-1137   Access 2007.
                        The "Disable Trust Bar         enabled/disabled
                        Notification for unsigned
                        application add-ins" setting
                        should be configured
                        correctly for Access 2007.
CCE-1423-3   CCE-1423
                        The "Disable all application enabled/disabled
                        add-ins" setting should be
                        configured correctly for
                        Access 2007.
CCE-1238-5   CCE-1238
                        The "Require that            enabled/disabled
                        application add-ins are
                        signed by Trusted
                        Publisher" setting should
                        be configured correctly for
CCE-1476-1   CCE-1476   Access 2007.
                        The "Disable all trusted     enabled/disabled
                        locations" setting should be
                        configured correctly for
                        Access 2007.

CCE-1520-6   CCE-1520
                        The "Allow Trusted            enabled/disabled
                        Locations not on the
                        computer" setting should
                        be configured correctly for
                        Access 2007.

CCE-780-7    CCE-780
                        The "Modal Trust Decision enabled/disabled
                        Only" setting should be
                        configured correctly for
                        Access 2007.

CCE-1214-6   CCE-1214
                        The "Disable commands"        enabled/disabled
                        setting should be
                        configured correctly for
                        Access 2007.
CCE-1370-6   CCE-1370
                        The "Disable commands -       enabled/disabled
                        Office Button | E-Mail"
                        setting should be
                        configured correctly for
                        Access 2007.
CCE-1268-2   CCE-1268
                        The "Disable commands - enabled/disabled
                        Office Button | Access
                        Options | Customize | All
                        Commands | Insert
                        Hyperlink" setting should
                        be configured correctly for
CCE-1400-1   CCE-1400   Access 2007.
                        The "Disable commands - enabled/disabled
                        Database Tools | Database
                        Tools | Encrypt with
                        Password" setting should
                        be configured correctly for
                        Access 2007.
CCE-1440-7   CCE-1440
                        The "Disable commands - enabled/disabled
                        Database Tools |
                        Administer | Users and
                        Permission | User and
                        Group Permissions" setting
                        should be configured
                        correctly for Access 2007.
CCE-581-9    CCE-581
                        The "Disable commands -       enabled/disabled
                        Database Tools |
                        Administer | Users and
                        Permissions | User and
                        Group Accounts" setting
                        should be configured
                        correctly for Access 2007.
CCE-1480-3   CCE-1480
                        The "Disable commands -       enabled/disabled
                        Database Tools |
                        Administer | Users and
                        Permission | User-Level
                        Security Wizard..." setting
                        should be configured
                        correctly for Access 2007.
CCE-1489-4   CCE-1489
                        The "Disable commands - enabled/disabled
                        Database Tools | Database
                        Tools | Encode/Decode
                        Database" setting should
                        be configured correctly for
                        Access 2007.
CCE-1392-0   CCE-1392
                        The "Disable commands - enabled/disabled
                        Database Tools | Macro |
                        Visual Basic" setting should
                        be configured correctly for
                        Access 2007.
CCE-1414-2   CCE-1414
                        The "Disable commands - enabled/disabled
                        Database Tools | Macro |
                        Run Macro" setting should
                        be configured correctly for
                        Access 2007.
CCE-1418-3   CCE-1418
                        The "Database Tools |        enabled/disabled
                        Macro | Convert Macros to
                        Visual Basic" setting should
                        be configured correctly for
                        Access 2007.
CCE-1405-0   CCE-1405
                        The "Database Tools |         enabled/disabled
                        Macro | Create Shortcut
                        Menu from Macro" setting
                        should be configured
                        correctly for Access 2007.
CCE-1550-3   CCE-1550
                        The "Disable shortcut keys" enabled/disabled
                        setting should be
                        configured correctly for
                        Access 2007.
CCE-1075-1   CCE-1075
                        The "Disable commands - enabled/disabled
                        Ctrl+K (Office Button |
                        Access Options |
                        Customize | All Commands
                        | Insert Hyperlinks)" setting
                        should be configured
                        correctly for Access 2007.

CCE-709-6    CCE-709
                        The "Disable commands - enabled/disabled
                        Alt+F11 (Database Tools |
                        Macro | Visual Basic)"
                        setting should be
                        configured correctly for
CCE-1502-4   CCE-1502   Access 2007.
                        The "Default file format    enabled/disabled
                        (Access 2007 | Access
                        2002-2003)" setting should
                        be configured correctly for
                        Access 2007.
CCE-1260-9   CCE-1260
                        The "Do not prompt to        enabled/disabled
                        convert older databases"
                        setting should be
                        configured correctly for
CCE-1510-7   CCE-1510   Access 2007.
                        The "Internet and network enabled/disabled
                        paths as hyperlinks" setting
                        should be configured
                        correctly for Excel 2007.

CCE-1532-1   CCE-1532
                        The "Save Excel files as   enabled/disabled
                        (Excel Workbook (*.xlsx) |
                        Excel Macro-Enabled
                        Workbook (*.xlsm) | Excel
                        Binary Workbook (*.xlsb) |
                        Web Page (*.htm; *.html) |
                        Excel 97-2003 Workbook
                        (*.xls) | Excel 5.0/95
                        Workbook (*.xls))" setting
                        should be configured
                        correctly for Excel 2007.
CCE-1039-7   CCE-1039
                        The "Disable                enabled/disabled
                        AutoRepublish" setting
                        should be configured
CCE-1295-5   CCE-1295   correctly for Excel 2007.
                        The "AutoRepublish          enabled/disabled
                        Warning Alert (Always
                        show the alert before
                        publishing | Never show the
                        alert before publishing)
                        " setting should be
                        configured correctly for
                        Excel 2007.
CCE-1334-2   CCE-1334
                        The "Determine whether to enabled/disabled
                        force encrypted macros to
                        be scanned in Microsoft
                        Excel Open XML
                        workbooks" setting should
                        be configured correctly
CCE-1308-6   CCE-1308
                        The "Force file extension to enabled/disabled
                        match file type (Allow
                        different | Allow different,
                        but warn | Always match
                        file type)" setting should be
                        configured correctly for
CCE-616-3    CCE-616    Excel 2007.
                        The "Store macro in           enabled/disabled
                        Personal Macro Workbook
                        by default" setting should
                        be configured correctly
CCE-1246-8   CCE-1246
                        The "Disable all application enabled/disabled
                        add-ins" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1251-8   CCE-1251
                        The "Require that            enabled/disabled
                        application add-ins are
                        signed by Trusted
                        Publisher" setting should
                        be configured correctly for
CCE-1524-8   CCE-1524   Excel 2007.
                        The "Disable Trust Bar       enabled/disabled
                        Notification for unsigned
                        application add-ins" setting
                        should be configured
                        correctly for Excel 2007.
CCE-1422-5   CCE-1422
                        The "Allow Trusted            enabled/disabled
                        Locations not on the
                        computer" setting should
                        be configured correctly for
                        Excel 2007.
CCE-1444-9   CCE-1444
                        The "Disable all trusted     enabled/disabled
                        locations" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1449-8   CCE-1449
                        The "Ignore other             enabled/disabled
                        applications " setting
                        should be configured
                        correctly for Excel 2007.
CCE-1471-2   CCE-1471
                        The "Ask to update          enabled/disabled
                        automatic links" setting
                        should be configured
CCE-1119-7   CCE-1119   correctly for Excel 2007.
                        The "Number of              enabled/disabled
                        documents in the Recent
                        Documents list (0-17)"
                        setting should be
                        configured correctly for
CCE-1378-9   CCE-1378   Excel 2007.
                        The "Save any additional    enabled/disabled
                        data necessary to maintain
                        formulas" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1277-3   CCE-1277
                        The "Load pictures from       enabled/disabled
                        Web pages not created in
                        Excel" setting should be
                        configured correctly for
CCE-1464-7   CCE-1464   Excel 2007.
                        The "Do not show data         enabled/disabled
                        extraction options when
                        opening corrupt
                        workbooks" setting should
                        be configured correctly for
CCE-1094-2   CCE-1094   Excel 2007.
                        The "Assume structured        enabled/disabled
                        storage format of workbook
                        is intact when recovering
                        data" setting should be
                        configured correctly for
CCE-1129-6   CCE-1129   Excel 2007.
                        The "Corrupt formula          enabled/disabled
                        conversion (Convert
                        unrecoverable references
                        to: values | #REF or
                        #NAME)" setting should be
                        configured correctly for
CCE-1389-6   CCE-1389   Excel 2007.
                        The "Connection File          enabled/disabled
                        Locations" setting should
                        be configured correctly for
                        Excel 2007.
CCE-1433-2   CCE-1433
                        The "Automatic Query        enabled/disabled
                        Refresh (Prompt for all
                        workbooks | Do not prompt;
                        do not allow auto refresh |
                        Do not prompt; allow auto
                        refresh)" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1323-5   CCE-1323
                        The "Disable commands"        enabled/disabled
                        setting should be
                        configured correctly for
                        Excel 2007.
CCE-1469-6   CCE-1469
                        The "Disable commands - enabled/disabled
                        Office Button | Excel
                        Options | Customize | All
                        Commands | Save as Web
                        Page" setting should be
                        configured correctly for
CCE-1473-8   CCE-1473   Excel 2007.
                        The "Disable commands - enabled/disabled
                        Office Button | Excel
                        Options | Customize | All
                        Commands | Web Page
                        Preview" setting should be
                        configured correctly for
CCE-1499-3   CCE-1499   Excel 2007.
                        The "Disable commands - enabled/disabled
                        Office Button | Send |
                        Email" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1024-9   CCE-1024
                        The "Disable commands -       enabled/disabled
                        Insert | Links | Hyperlink"
                        setting should be
                        configured correctly for
                        Excel 2007.
CCE-1530-5   CCE-1530
                        The "Disable commands - enabled/disabled
                        Review | Changes | Protect
                        Sheet" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1120-5   CCE-1120
                        The "Disable commands - enabled/disabled
                        Review | Changes | Protect
                        Workbook" setting should
                        be configured correctly for
                        Excel 2007.
CCE-1252-6   CCE-1252
                        The "Disable commands - enabled/disabled
                        Review | Changes | Protect
                        and Share Workbook"
                        setting should be
                        configured correctly for
CCE-1151-0   CCE-1151   Excel 2007.
                        The "Disable commands - enabled/disabled
                        View | Macros | Macros"
                        setting should be
                        configured correctly for
                        Excel 2007.
CCE-1301-1   CCE-1301
                        The "Disable commands - enabled/disabled
                        Developer | Code | Macros"
                        setting should be
                        configured correctly for
                        Excel 2007.
CCE-1310-2   CCE-1310
                        The "Disable commands - enabled/disabled
                        Developer | Code | Record
                        Macro" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1213-8   CCE-1213
                        The "Disable commands - enabled/disabled
                        Developer | Code | Macro
                        Security" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1362-3   CCE-1362
                        The "Disable commands -     enabled/disabled
                        Developer | Code | Visual
                        Basic" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1156-9   CCE-1156
                        The "Disable commands - enabled/disabled
                        Office Button | Excel
                        Options | Customize | All
                        Commands | Document
                        Location" setting should be
                        configured correctly for
CCE-1429-0   CCE-1429   Excel 2007.
                        The "Disable shortcut keys" enabled/disabled
                        setting should be
                        configured correctly for
                        Excel 2007.
CCE-1182-5   CCE-1182
                        The "Disable shortcut keys - enabled/disabled
                        Ctrl+K (Insert | Links |
                        Hyperlink)" setting should
                        be configured correctly for
                        Excel 2007.
CCE-1525-5   CCE-1525
                        The "Disable shortcut keys - enabled/disabled
                        Alt+F8 (Developer | Code |
                        Macros)" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1547-9   CCE-1547
                        The "Disable shortcut keys - enabled/disabled
                        Alt+F11 (Developer | Code
                        | Visual Basic)" setting
                        should be configured
                        correctly for Excel 2007.
CCE-1300-3   CCE-1300
                        The "Block opening of pre- enabled/disabled
                        release versions of file
                        formats new to Excel 2007"
                        setting should be
                        configured correctly for
CCE-1331-8   CCE-1331   Excel 2007.
                        The "Block opening of         enabled/disabled
                        Open XML file types"
                        setting should be
                        configured correctly for
CCE-1468-8   CCE-1468   Excel 2007.
                        The "Block opening of         enabled/disabled
                        Binary 12 file types" setting
                        should be configured
                        correctly for Excel 2007.
CCE-1490-2   CCE-1490
                        The "Block opening of        enabled/disabled
                        Binary file types" setting
                        should be configured
                        correctly for Excel 2007.
CCE-1512-3   CCE-1512
                        The "Block opening of Html enabled/disabled
                        and Xmlss files types"
                        setting should be
                        configured correctly for
CCE-1543-8   CCE-1543   Excel 2007.
                        The "Block opening of Xml enabled/disabled
                        file types" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1195-7   CCE-1195
                        The "Block opening of DIF enabled/disabled
                        and SYLK file types" setting
                        should be configured
                        correctly for Excel 2007.
CCE-554-6    CCE-554
                        The "Block opening of Text enabled/disabled
                        file types" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1415-9   CCE-1415
                        The "Block opening of Xll      enabled/disabled
                        file type" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1437-3   CCE-1437
                        The "Block saving of Open enabled/disabled
                        Xml file types" setting
                        should be configured
                        correctly for Excel 2007.
CCE-1446-4   CCE-1446
                        The "Block saving of         enabled/disabled
                        Binary12 file types" setting
                        should be configured
                        correctly for Excel 2007.
CCE-1098-3   CCE-1098
                        The "Block saving of Binary enabled/disabled
                        file types" setting should be
                        configured correctly for
                        Excel 2007.
CCE-562-9    CCE-562
                        The "Block saving of Html      enabled/disabled
                        and Xmlss file types"
                        setting should be
                        configured correctly for
CCE-1507-3   CCE-1507   Excel 2007.
                        The "Block saving Xml file     enabled/disabled
                        types" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1406-8   CCE-1406
                        The "Block saving DIF and enabled/disabled
                        SYLK file types" setting
                        should be configured
                        correctly for Excel 2007.
CCE-573-6    CCE-573
                        The "Block saving of Text enabled/disabled
                        file types" setting should be
                        configured correctly for
                        Excel 2007.
CCE-1336-7   CCE-1336
                        The "Locally cache network enabled/disabled
                        file storages" setting should
                        be configured correctly for
                        Excel 2007.
CCE-1230-2   CCE-1230
                        The "Locally cache          enabled/disabled
                        PivotTable reports" setting
                        should be configured
                        correctly for Excel 2007.
CCE-1375-5   CCE-1375
                        The "OLAP PivotTable           enabled/disabled
                        User Defined Function
                        (UDF) security setting
                        (Allow ALL UDFs | Allow
                        safe UDFs only | Allow NO
                        UDFs)" setting should be
                        configured correctly for
CCE-1380-5   CCE-1380   Excel 2007.
                        The "Recognize                 enabled/disabled
                        SmartTags" setting should
                        be configured correctly for
CCE-1376-3   CCE-1376   Excel 2007.
                        The "Number of                 enabled/disabled
                        documents in the Recent
                        Documents list (0 - 9)"
                        setting should be
                        configured correctly for
CCE-1398-7   CCE-1398   InfoPath 2007.
                        The "Offline Mode status       enabled/disabled
                        (Disabled | Enabled,
                        InfoPath in Offline Mode |
                        Enabled, InfoPath not in
                        Offline Mode)" setting
                        should be configured
                        correctly for InfoPath 2007.
CCE-569-4    CCE-569
                        The "Disable commands"         enabled/disabled
                        setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1065-2   CCE-1065
                        The "Disable commands -        enabled/disabled
                        File | Print" setting should
                        be configured correctly for
                        InfoPath 2007.
CCE-1361-5   CCE-1361
                        The "Disable commands -       enabled/disabled
                        File | Send to Mail
                        Recipient" setting should
                        be configured correctly for
                        InfoPath 2007.
CCE-1096-7   CCE-1096
                        The "Disable commands - enabled/disabled
                        File | Open from
                        SharePoint Site" setting
                        should be configured
                        correctly for InfoPath 2007.
CCE-1391-2   CCE-1391
                        The "Disable commands - enabled/disabled
                        File | Print Preview" setting
                        should be configured
                        correctly for InfoPath 2007.

CCE-1519-8   CCE-1519
                        The "Disable commands - enabled/disabled
                        File | Page Setup" setting
                        should be configured
                        correctly for InfoPath 2007.

CCE-1523-0   CCE-1523
                        The "Disable commands -       enabled/disabled
                        Insert | Hyperlinks..."
                        setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1171-8   CCE-1171
                        The "Disable commands -       enabled/disabled
                        Tools | Set Language"
                        setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1457-1   CCE-1457
                        The "Disable commands -       enabled/disabled
                        Tools | Customize..."
                        setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1426-6   CCE-1426
                        The "Disable commands - enabled/disabled
                        Tools | Options..." setting
                        should be configured
                        correctly for InfoPath 2007.

CCE-805-2    CCE-805
                        The "Disable commands -       enabled/disabled
                        Help | Microsoft Office
                        Online" setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1453-0   CCE-1453
                        The "Disable commands - enabled/disabled
                        Office Diagnostics" setting
                        should be configured
                        correctly for InfoPath 2007.

CCE-1351-6   CCE-1351
                        The "Disable commands -       enabled/disabled
                        Help | Activate Product..."
                        setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-620-5    CCE-620
                        The "Disable commands - enabled/disabled
                        Print Default" setting
                        should be configured
                        correctly for InfoPath 2007.
CCE-1017-3   CCE-1017
                        The "Disable shortcut keys" enabled/disabled
                        setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1021-5   CCE-1021
                        The "Disable shortcut keys - enabled/disabled
                        Print Shortcut (Ctrl+P)"
                        setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1299-7   CCE-1299
                        The "Disable shortcut keys - enabled/disabled
                        Insert Hyperlink Shortcut
                        (Ctrl+K)" setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1197-3   CCE-1197
                        The "Control behavior for enabled/disabled
                        Windows SharePoint
                        Services gradual upgrade
                        (Allow redirections to any
                        location | Allow redirections
                        to Intranet only | Block all
                        redirections)" setting
                        should be configured
                        correctly for InfoPath 2007.

CCE-704-7    CCE-704
                        The "Disable opening of      enabled/disabled
                        solutions from the Internet
                        security zone" setting
                        should be configured
                        correctly for InfoPath 2007.
CCE-1105-6   CCE-1105
                        The "Disable fully trusted   enabled/disabled
                        solutions full access to
                        computer" setting should
                        be configured correctly for
`            CCE-1114   InfoPath 2007.
                        The "Allow the use of        enabled/disabled
                        ActiveX Custom Controls in
                        InfoPath forms" setting
                        should be configured
                        correctly for InfoPath 2007.
CCE-761-7    CCE-761
                        The "Run forms in            enabled/disabled
                        restricted mode if they do
                        not specify a publish
                        location and use only
                        features introduced before
                        InfoPath 2003 SP1" setting
                        should be configured
                        correctly for InfoPath 2007.
CCE-739-3    CCE-739
                        The "Allow file types as        enabled/disabled
                        attachments to forms"
                        setting should be
                        configured correctly for
CCE-1259-1   CCE-1259   InfoPath 2007.
                        The "Block specific file        enabled/disabled
                        types as attachments to
                        forms" setting should be
                        configured correctly for
CCE-1267-4   CCE-1267   InfoPath 2007.
                        The "Prevent users from         enabled/disabled
                        allowing unsafe file types to
                        be attached to forms"
                        setting should be
                        configured correctly for
CCE-1060-3   CCE-1060   InfoPath 2007.
                        The "Display a warning that     enabled/disabled
                        a form is digitally signed"
                        setting should be
                        configured correctly for
CCE-955-5    CCE-955    InfoPath 2007.
                        The "Control behavior     enabled/disabled
                        when opening forms in the
                        Internet security zone
                        (Block | Prompt | Allow)"
                        setting should be
                        configured correctly for
CCE-1479-5   CCE-1479   InfoPath 2007.
                        The "Control behavior     enabled/disabled
                        when opening forms in the
                        Intranet security zone
                        (Block | Prompt | Allow)"
                        setting should be
                        configured correctly for
CCE-1360-7   CCE-1360   InfoPath 2007.
                        The "Control behavior     enabled/disabled
                        when opening forms in the
                        Local Machine security
                        zone (Block | Prompt |
                        Allow)" setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1386-2   CCE-1386
                        The "Control behavior        enabled/disabled
                        when opening forms in the
                        Trusted Site security zone
                        (Block | Prompt | Allow)"
                        setting should be
                        configured correctly for
CCE-893-8    CCE-893    InfoPath 2007.
                        The "Beaconing UI for        enabled/disabled
                        forms opened in InfoPath
                        (Never show beaconing UI
                        | Always show beaconing
                        UI | Show UI if Form
                        Template is from Internet
                        Zone)" setting should be
                        configured correctly for
CCE-1290-6   CCE-1290   InfoPath 2007.
                        The "Beaconing UI for        enabled/disabled
                        forms opened in InfoPath
                        Editor ActiveX (Never show
                        beaconing UI | Always
                        show beaconing UI | Show
                        UI if Form Template is from
                        Internet Zone)" setting
                        should be configured
                        correctly for InfoPath 2007.
CCE-1381-3   CCE-1381
                        The "Disable all application enabled/disabled
                        add-ins" setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1135-3   CCE-1135
                        The "Require that            enabled/disabled
                        application add-ins are
                        signed by Trusted
                        Publisher" setting should
                        be configured correctly for
CCE-1157-7   CCE-1157   InfoPath 2007.
                        The "Disable Trust Bar       enabled/disabled
                        Notification for unsigned
                        application add-ins" setting
                        should be configured
                        correctly for InfoPath 2007.
CCE-1434-0   CCE-1434
                        The "Control behavior       enabled/disabled
                        when opening InfoPath e-
                        mail forms containing code
                        or script (Run without
                        prompting | Prompt before
                        running | Never run)"
                        setting should be
                        configured correctly for
CCE-1315-1   CCE-1315   InfoPath 2007.
                        The "Disable sending form enabled/disabled
                        template with e-mail forms"
                        setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1210-4   CCE-1210
                        The "Disable dynamic        enabled/disabled
                        caching of the form
                        template in InfoPath e-mail
                        forms" setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1236-9   CCE-1236
                        The "Disable sending        enabled/disabled
                        InfoPath 2003 Forms as e-
                        mail forms" setting should
                        be configured correctly for
                        InfoPath 2007.
CCE-884-7    CCE-884
                        The "Disable e-mail forms enabled/disabled
                        running in restricted
                        security level" setting
                        should be configured
                        correctly for InfoPath 2007.
CCE-1518-0   CCE-1518
                        The "Disable e-mail forms enabled/disabled
                        from the Internet security
                        zone" setting should be
                        configured correctly for
CCE-1170-0   CCE-1170   InfoPath 2007.
                        The "Disable e-mail forms enabled/disabled
                        from the Intranet security
                        zone" setting should be
                        configured correctly for
CCE-1316-9   CCE-1316   InfoPath 2007.
                        The "Disable e-mail forms enabled/disabled
                        from the Full Trust security
                        zone" setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1567-7   CCE-1567
                        The "Disable InfoPath e-     enabled/disabled
                        mail forms in Outlook"
                        setting should be
                        configured correctly for
CCE-1265-8   CCE-1265   InfoPath 2007.
                        The "Information Rights      enabled/disabled
                        Management" setting
                        should be configured
                        correctly for InfoPath 2007.
CCE-1538-8   CCE-1538
                        The "Custom code" setting enabled/disabled
                        should be configured
                        correctly for InfoPath 2007.
CCE-1564-4   CCE-1564
                        The "Email Forms           enabled/disabled
                        Beaconing UI (Never show
                        UI | Always show UI | Show
                        UI if XSN is in Internet
                        Zone)" setting should be
                        configured correctly for
                        InfoPath 2007.
CCE-1212-0   CCE-1212
                        The "Disable user           enabled/disabled
                        customization of Quick
                        Access Toolbar via UI"
                        setting should be
                        configured correctly
CCE-1344-1   CCE-1344
                        The "Disable user           enabled/disabled
                        customization of Quick
                        Access Toolbar via UI -
                        Disallow in Word" setting
                        should be configured
CCE-723-7    CCE-723    correctly
                        The "Disable user            enabled/disabled
                        customization of Quick
                        Access Toolbar via UI -
                        Disallow in Excel" setting
                        should be configured
CCE-1384-7   CCE-1384   correctly
                        The "Disable user            enabled/disabled
                        customization of Quick
                        Access Toolbar via UI -
                        Disallow in PowerPoint"
                        setting should be
                        configured correctly
CCE-1159-3   CCE-1159
                        The "Disable user            enabled/disabled
                        customization of Quick
                        Access Toolbar via UI -
                        Disallow in Access" setting
                        should be configured
CCE-1146-0   CCE-1146   correctly
                        The "Disable user            enabled/disabled
                        customization of Quick
                        Access Toolbar via UI -
                        Disallow in Outlook" setting
                        should be configured
CCE-1542-0   CCE-1542   correctly
                        The "Disable all user        enabled/disabled
                        customization of Quick
                        Access Toolbar" setting
                        should be configured
                        correctly
CCE-582-7    CCE-582
                        The "Disable all user      enabled/disabled
                        customization of Quick
                        Access Toolbar - Disallow
                        in Word" setting should be
                        configured correctly
CCE-1291-4   CCE-1291
                        The "Disable all user       enabled/disabled
                        customization of Quick
                        Access Toolbar - Disallow
                        in Excel" setting should be
                        configured correctly
CCE-1326-8   CCE-1326
                        The "Disable all user        enabled/disabled
                        customization of Quick
                        Access Toolbar - Disallow
                        in PowerPoint" setting
                        should be configured
CCE-1330-0   CCE-1330   correctly
                        The "Disable all user        enabled/disabled
                        customization of Quick
                        Access Toolbar - Disallow
                        in Access" setting should
                        be configured correctly
CCE-1335-9   CCE-1335
                        The "Disable all user        enabled/disabled
                        customization of Quick
                        Access Toolbar - Disallow
                        in Outlook" setting should
                        be configured correctly
CCE-1229-4   CCE-1229
                        The "Disable UI extending    enabled/disabled
                        from documents and
                        templates" setting should
                        be configured correctly

CCE-630-4    CCE-630
                        The "Disable UI extending    enabled/disabled
                        from documents and
                        templates - Disallow in
                        Word" setting should be
                        configured correctly
CCE-1154-4   CCE-1154
                        The "Disable UI extending    enabled/disabled
                        from documents and
                        templates - Disallow in
                        Excel" setting should be
                        configured correctly
CCE-1410-0   CCE-1410
                        The "Disable UI extending enabled/disabled
                        from documents and
                        templates - Disallow in
                        PowerPoint" setting should
                        be configured correctly
CCE-1432-4   CCE-1432
                        The "Disable UI extending    enabled/disabled
                        from documents and
                        templates - Disallow in
                        Access" setting should be
                        configured correctly
CCE-1198-1   CCE-1198
                        The "Disable UI extending enabled/disabled
                        from documents and
                        templates - Disallow in
                        Outlook" setting should be
                        configured correctly
CCE-929-0    CCE-929
                        The "Recognize smart tags enabled/disabled
                        in Excel" setting should be
                        configured correctly


CCE-1074-4   CCE-1074
                        The "Disable Clip Art and enabled/disabled
                        Media downloads from the
                        client and from Office
                        Online website" setting
                        should be configured
CCE-1458-9   CCE-1458   correctly
                        The "Disable template      enabled/disabled
                        downloads from the client
                        and from Office Online
                        website" setting should be
                        configured correctly
CCE-1233-6   CCE-1233
                        The "Disable access to     enabled/disabled
                        updates, add-ins, and
                        patches on the Office
                        Online website" setting
                        should be configured
CCE-1379-7   CCE-1379   correctly
                        The "Prevents users from enabled/disabled
                        uploading document
                        templates to the Office
                        Online community." setting
                        should be configured
CCE-1401-9   CCE-1401   correctly
                        The "Disable training      enabled/disabled
                        practice downloads from
                        the Office Online website"
                        setting should be
                        configured correctly
CCE-1528-9   CCE-1528
                        The "Disable customer-      enabled/disabled
                        submitted templates
                        downloads from Office
                        Online" setting should be
                        configured correctly
CCE-1533-9   CCE-1533
                        The "Open Office            enabled/disabled
                        documents as read/write
                        while browsing" setting
                        should be configured
                        correctly
CCE-646-0    CCE-646
                        The "Rely on VML for        enabled/disabled
                        displaying graphics in
                        browsers" setting should be
                        configured correctly

CCE-1438-1   CCE-1438
                        The "Allow PNG as an           enabled/disabled
                        output format" setting
                        should be configured
                        correctly
CCE-711-2    CCE-711
                        The "Improve Proofing          enabled/disabled
                        Tools" setting should be
                        configured correctly

CCE-1292-2   CCE-1292
                        The "Disable Opt-in Wizard
                        on first run" setting should
                        be configured correctly.

CCE-1615-4   CCE-1615                                  enabled/disabled
                        The "Microsoft Office          enabled/disabled
                        Online" setting should be
CCE-1191-6   CCE-1191   configured correctly
                        The "Disable Password      enabled/disabled
                        Caching" setting should be
                        configured correctly
CCE-1587-5   CCE-1587
                        The "Disable all Trust Bar     enabled/disabled
                        notifications for security
                        issues" setting should be
                        configured correctly
CCE-1486-0   CCE-1486
                        The "Protect document     enabled/disabled
                        metadata for rights
                        managed Office Open XML
                        Files" setting should be
CCE-1508-1   CCE-1508   configured correctly
                        The "Protect document     enabled/disabled
                        metadata for password
                        protected files." setting
                        should be configured
CCE-1640-2   CCE-1640   correctly
                        The "Encryption type for  enabled/disabled
                        password protected Office
                        Open XML files" setting
                        should be configured
CCE-1539-6   CCE-1539   correctly
                        The "Encryption type for    enabled/disabled
                        password protected Office
                        97-2003 files" setting
                        should be configured
CCE-1561-0   CCE-1561   correctly
                        The "Load Controls in       enabled/disabled
                        Forms3 (1 | 2 | 3 | 4)"
                        setting should be
CCE-1068-6   CCE-1068   configured correctly
                        The "Automation Security enabled/disabled
                        (Disable macros by default
                        | Use application macro
                        security level | Macros
                        enabled)" setting should be
                        configured correctly



CCE-1574-3   CCE-1574
                        The "Prevent Word and    enabled/disabled
                        Excel from loading
                        managed code extensions"
                        setting should be
                        configured correctly
CCE-1239-3   CCE-1239
                        The "Disable hyperlink      enabled/disabled
                        warnings" setting should be
                        configured correctly
CCE-1623-8   CCE-1623
                        The "Disable password to enabled/disabled
                        open UI" setting should be
                        configured correctly
CCE-1083-5   CCE-1083
                        The "Download Office        enabled/disabled
                        Controls" setting should be
                        configured correctly
CCE-1343-3   CCE-1343
                        The "Disable All ActiveX"   enabled/disabled
                        setting should be
                        configured correctly
CCE-1242-7   CCE-1242
                        The "Allow mix of policy    enabled/disabled
                        and user locations" setting
                        should be configured
                        correctly
CCE-770-8    CCE-770
                        The "Disable Smart          enabled/disabled
                        Document's use of
                        manifests" setting should
                        be configured correctly
CCE-903-5    CCE-903
                        The "Completely disable    enabled/disabled
                        the Smart Documents
                        feature in Word and Excel"
                        setting should be
                        configured correctly
CCE-1555-2   CCE-1555
                        The "Disable Internet Fax    enabled/disabled
                        feature" setting should be
                        configured correctly

CCE-1061-1   CCE-1061
                        The "Prevent users from      enabled/disabled
                        changing permissions on
                        rights managed content"
                        setting should be
                        configured correctly
CCE-1603-0   CCE-1603
                        The "Allow users with         enabled/disabled
                        earlier versions of Office to
                        read with browsers..."
                        setting should be
                        configured correctly
CCE-1612-1   CCE-1612
                        The "Always require users enabled/disabled
                        to connect to verify
                        permission" setting should
                        be configured correctly
CCE-1493-6   CCE-1493
                        The "Always expand         enabled/disabled
                        groups in Office when
                        restricting permission for
                        documents" setting should
                        be configured correctly
CCE-1409-2   CCE-1409
                        The "Never allow users to enabled/disabled
                        specify groups when
                        restricting permission for
                        documents" setting should
                        be configured correctly
CCE-1589-1   CCE-1589
                        The "Disable Microsoft     enabled/disabled
                        Passport service for
                        content with restricted
                        permission" setting should
                        be configured correctly
CCE-1237-7   CCE-1237
                        The "Do not allow users to enabled/disabled
                        upgrade Information Rights
                        Management configuration"
                        setting should be
                        configured correctly
CCE-1404-3   CCE-1404
                        The "Key Usage Filtering"     enabled/disabled
                        setting should be
CCE-1396-1   CCE-1396   configured correctly
                        The "EKU filtering" setting   enabled/disabled
                        should be configured
                        correctly
CCE-1167-6   CCE-1167
                        The "Legacy format            enabled/disabled
                        signatures" setting should
                        be configured correctly
CCE-1585-9   CCE-1585
                        The "Suppress Office       enabled/disabled
                        Signing Providers (Enable
                        Western and East Asian |
                        Suppress default Western |
                        Suppress default East
                        Asian | Suppress both
                        Western and East Asian)"
                        setting should be
                        configured correctly
CCE-1572-7   CCE-1572
                        The "Suppress external        enabled/disabled
                        signature services menu
                        item" setting should be
                        configured correctly
CCE-1220-3   CCE-1220
                        The "Disable Check For        enabled/disabled
                        Solutions" setting should
                        be configured correctly
CCE-1634-5   CCE-1634
                        The "Disable inclusion of     enabled/disabled
                        document properties in
                        PDF and XPS output"
                        setting should be
                        configured correctly
CCE-1643-6   CCE-1643
                        The "Disable Document         enabled/disabled
                        Information Panel" setting
                        should be configured
                        correctly
CCE-1546-1   CCE-1546
                        The "Document              enabled/disabled
                        Information Panel
                        Beaconing UI (Never show
                        UI | Always show UI | Show
                        UI if XSN is in Internet
                        Zone)" setting should be
                        configured correctly
CCE-1505-7   CCE-1505
                        The "Disable the Office     enabled/disabled
                        client from polling the
                        Office server for published
                        links" setting should be
CCE-1545-3   CCE-1545   configured correctly
                        The "Block opening of pre- enabled/disabled
                        release versions of file
                        formats new to Word 2007
                        through the Compatibility
                        Pack for the 2007 Office
                        system and Word 2007
                        Open XML/Word 97-2003
                        Format Converter" setting
                        should be configured
                        correctly
CCE-1549-5   CCE-1549
                        The "Block opening of pre- enabled/disabled
                        release versions of file
                        formats new to Excel 2007
                        through the Compatibility
                        Pack for the 2007 Office
                        system and Excel 2007
                        Converter" setting should
                        be configured correctly
CCE-1431-6   CCE-1431
                        The "Block opening of pre- enabled/disabled
                        release versions of file
                        formats new to PowerPoint
                        2007 through the
                        Compatibility Pack for the
                        2007 Office system and
                        PowerPoint 2007
                        Converter" setting should
CCE-1594-1   CCE-1594   be configured correctly
                        The "Control Blogging        enabled/disabled
                        (Enabled | Only SharePoint
                        blogs allowed | All blogging
                        disabled)" setting should be
                        configured correctly
CCE-1241-9   CCE-1241
                        The "Enable Smart         enabled/disabled
                        Resume" setting should be
                        configured correctly

CCE-1607-1   CCE-1607
                        The "Do not upload media    enabled/disabled
                        files" setting should be
                        configured correctly
CCE-752-6    CCE-752
                        The "Disable hyperlinks to enabled/disabled
                        web templates in File | New
                        and task panes" setting
                        should be configured
CCE-1166-8   CCE-1166   correctly
                        The "Prevent access to      enabled/disabled
                        Web-based file storage"
                        setting should be
                        configured correctly
CCE-654-4    CCE-654
                        The "Do not allow          enabled/disabled
                        attachment previewing in
                        Outlook" setting should be
                        configured correctly for
CCE-1192-4   CCE-1192   Outlook 2007.
                        The "Read e-mail as plain enabled/disabled
                        text" setting should be
                        configured correctly for
                        Outlook 2007.
CCE-791-4    CCE-791
                        The "Read signed e-mail       enabled/disabled
                        as plain text" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-1456-3   CCE-1456
                        The "Prevent publishing to enabled/disabled
                        Office Online" setting
                        should be configured
                        correctly for Outlook 2007.


CCE-1478-7   CCE-1478
                        The "Prevent publishing to enabled/disabled
                        a DAV server" setting
                        should be configured
                        correctly for Outlook 2007.


CCE-1368-0   CCE-1368
                        The "Restrict level of       enabled/disabled
                        calendar details users can
                        publish (All options are
                        available | Disables 'Full
                        details' | Disables 'Full
                        details' and 'Limited
                        details')" setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1641-0   CCE-1641
                        The "Access to published      enabled/disabled
                        calendars" setting should
                        be configured correctly for
                        Outlook 2007.


CCE-1266-6   CCE-1266
                        The "Restrict upload          enabled/disabled
                        method" setting should be
                        configured correctly for
                        Outlook 2007.


CCE-1399-5   CCE-1399
                        The "Hide Junk Mail UI"       enabled/disabled
                        setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1187-4   CCE-1187
                        The "Junk E-mail             enabled/disabled
                        protection level (No
                        Protection, Low, High,
                        Trusted Lists Only)" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1588-3   CCE-1588
                        The "Trust E-mail from      enabled/disabled
                        Contacts" setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1117-1   CCE-1117
                        The "Add e-mail recipients enabled/disabled
                        to users' Safe Senders
                        Lists" setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1130-4   CCE-1130
                        The "Dial-up options"         enabled/disabled
                        setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1093-4   CCE-1093
                        The "Dial-up options -      enabled/disabled
                        Warn before switching dial-
                        up connection" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1599-0   CCE-1599
                        The "Dial-up options -      enabled/disabled
                        Hang up when finished
                        sending, receiving, or
                        updating" setting should be
                        configured correctly for
CCE-1621-2   CCE-1621   Outlook 2007.
                        The "Dial-up options -      enabled/disabled
                        Automatically dial during a
                        background Send/Receive"
                        setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1269-0   CCE-1269
                        The "Do not allow creating, enabled/disabled
                        replying, or forwarding
                        signatures for e-mail
                        messages" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-1419-1   CCE-1419
                        The "Send copy of pictures enabled/disabled
                        with HTML messages
                        instead of reference to
                        Internet location" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1551-1   CCE-1551
                        The "Outlook Rich Text     enabled/disabled
                        options (Convert to HTML |
                        Convert to Plain Text
                        format | Send Using
                        Outlook Rich Text format)"
                        setting should be
                        configured correctly for
CCE-655-1    CCE-655    Outlook 2007.
                        The "Plain text options"   enabled/disabled
                        setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1592-5   CCE-1592
                        The "Plain text options -     enabled/disabled
                        Encode attachments in
                        UUENCODE format when
                        sending a plain text
                        message" setting should
                        be configured correctly for
CCE-1614-7   CCE-1614   Outlook 2007.
                        The "Set message format        enabled/disabled
                        (HTML | Rich Text | Plain
                        Text)" setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1526-3   CCE-1526
                        The "Make Outlook the          enabled/disabled
                        default program for E-mail,
                        Contacts, and Calendar"
                        setting should be
                        configured correctly for
CCE-1111-4   CCE-1111   Outlook 2007.
                        The "Do not allow folders in   enabled/disabled
                        non-default stores to be set
                        as folder home pages"
                        setting should be
                        configured correctly for
CCE-1494-4   CCE-1494   Outlook 2007.
                        The "Use Unicode format        enabled/disabled
                        when dragging e-mail
                        message to file system"
                        setting should be
                        configured correctly for
CCE-1287-2   CCE-1287   Outlook 2007.
                        The "Do not allow Outlook      enabled/disabled
                        object model scripts to run
                        for shared folders" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1529-7   CCE-1529
                        The "Do not allow Outlook enabled/disabled
                        object model scripts to run
                        for public folders" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1560-2   CCE-1560
                        The "Set maximum level of enabled/disabled
                        online status on a person
                        name (Do not allow | Allow
                        everywhere except To and
                        CC field | Allow
                        everywhere)" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1596-6   CCE-1596
                        The "Display online status enabled/disabled
                        on a person name (Never |
                        Everywhere except To and
                        CC field | Everywhere)"
                        setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1604-8   CCE-1604
                        The "Turn off Enable the  enabled/disabled
                        Person Names Smart Tag
                        option" setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1648-5   CCE-1648
                        The "Outlook Security       enabled/disabled
                        Mode (Outlook Default
                        Security | Use Security
                        Form from 'Outlook
                        Security Settings' Public
                        Folder | Use Security Form
                        from 'Outlook 10 Security
                        Settings' Public Folder |
                        Use Outlook Security
                        Group Policy)" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1516-4   CCE-1516
                        The "Display Level 1        enabled/disabled
                        attachments" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1296-3   CCE-1296
                        The "Allow users to demote enabled/disabled
                        attachments to Level 2"
                        setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1388-8   CCE-1388
                        The "Do not prompt about enabled/disabled
                        Level 1 attachments when
                        sending an item" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1652-7   CCE-1652
                        The "Do not prompt about enabled/disabled
                        Level 1 attachments when
                        closing an item" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1569-3   CCE-1569
                        The "Allow in-place         enabled/disabled
                        activation of embedded
                        OLE objects" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1459-7   CCE-1459
                        The "Display OLE package enabled/disabled
                        objects" setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1608-9   CCE-1608
                        The "Add file extensions to enabled/disabled
                        block as Level 1" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1617-0   CCE-1617
                        The "Remove file             enabled/disabled
                        extensions blocked as
                        Level 1" setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1631-1   CCE-1631
                        The "Add file extensions to enabled/disabled
                        block as Level 2" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1155-1   CCE-1155
                        The "Remove file             enabled/disabled
                        extensions blocked as
                        Level 2" setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1556-0   CCE-1556
                        The "Allow scripts in one- enabled/disabled
                        off Outlook forms" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1595-8   CCE-1595
                        The "Set Outlook object      enabled/disabled
                        model Custom Actions
                        execution prompt (Prompt
                        User | Automatically
                        Approve | Automatically
                        Deny | Prompt user based
                        on computer security)"
                        setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1436-5   CCE-1436
                        The "Set control            enabled/disabled
                        ItemProperty prompt
                        (Prompt User |
                        Automatically Approve |
                        Automatically Deny |
                        Prompt user based on
                        computer security)" setting
                        should be configured
CCE-1586-7   CCE-1586   correctly
                        The "Configure Outlook      enabled/disabled
                        object model prompt when
                        sending mail (Prompt User
                        | Automatically Approve |
                        Automatically Deny |
                        Prompt user based on
                        computer security)" setting
                        should be configured
                        correctly for Outlook 2007.

CCE-1590-9   CCE-1590
                        The "Configure Outlook      enabled/disabled
                        object model prompt when
                        accessing an address book
                        (Prompt User |
                        Automatically Approve |
                        Automatically Deny |
                        Prompt user based on
                        computer security)" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1004-1   CCE-1004
                        The "Configure Outlook      enabled/disabled
                        object model prompt when
                        reading address
                        information (Prompt User |
                        Automatically Approve |
                        Automatically Deny |
                        Prompt user based on
                        computer security)" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1273-2   CCE-1273
                        The "Configure Outlook      enabled/disabled
                        object model prompt when
                        responding to meeting and
                        task requests (Prompt User
                        | Automatically Approve |
                        Automatically Deny |
                        Prompt user based on
                        computer security)" setting
                        should be configured
                        correctly for Outlook 2007.

CCE-1172-6   CCE-1172
                        The "Configure Outlook    enabled/disabled
                        object model prompt when
                        executing Save As (Prompt
                        User | Automatically
                        Approve | Automatically
                        Deny | Prompt user based
                        on computer security)"
                        setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1568-5   CCE-1568
                        The "Configure Outlook      enabled/disabled
                        object model prompt When
                        accessing the Formula
                        property of a UserProperty
                        object (Prompt User |
                        Automatically Approve |
                        Automatically Deny |
                        Prompt user based on
                        computer security)" setting
                        should be configured
                        correctly for Outlook 2007.

CCE-1573-5   CCE-1573
                        The "Configure Outlook      enabled/disabled
                        object model prompt when
                        accessing address
                        information via
                        UserProperties.Find
                        (Prompt User |
                        Automatically Approve |
                        Automatically Deny |
                        Prompt user based on
                        computer security)" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1454-8   CCE-1454
                        The "Required Certificate enabled/disabled
                        Authority" setting should be
                        configured correctly for
CCE-1498-5   CCE-1498   Outlook 2007.
                        The "S/MIME                  enabled/disabled
                        interoperability with
                        external clients: (Handle
                        internally | Handle
                        externally | Handle if
                        possible)" setting should be
                        configured correctly for
CCE-1630-3   CCE-1630   Outlook 2007.
                        The "Always use Rich Text enabled/disabled
                        formatting in S/MIME
                        messages" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-1626-1   CCE-1626
                        The "S/MIME password        enabled/disabled
                        settings" setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1163-5   CCE-1163
                        The "S/MIME password        enabled/disabled
                        settings - Default S/MIME
                        password time (minutes):
                        (0 - 2147483647)" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1445-6   CCE-1445
                        The "S/MIME password        enabled/disabled
                        settings - Maximum
                        S/MIME password time
                        (minutes): (0 -
                        2147483647)" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1582-6   CCE-1582
                        The "Message Formats"       enabled/disabled
                        setting should be
                        configured correctly for
CCE-1357-3   CCE-1357   Outlook 2007.
                        The "Message Formats -      enabled/disabled
                        Support the following
                        message formats: (S/MIME
                        | Exchange | Fortezza |
                        S/MIME and Exchange |
                        S/MIME and Fortezza |
                        Exchange and Fortezza |
                        S/MIME, Exchange, and
                        Fortezza)" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-1132-0   CCE-1132
                        2007: The "Do not provide enabled/disabled
                        Continue option on
                        Encryption warning dialog
                        boxes" setting should be
                        configured correctly for
                        Outlook 2007. 2003: The
                        "Disable Continue button
                        on all Encryption warning
                        dialogs" setting should be
                        configured correctly.
CCE-1511-5   CCE-1511
                        The "Run in FIPS            enabled/disabled
                        compliant mode" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1018-1   CCE-1018
                        The "Encrypt all e-mail        enabled/disabled
                        messages" setting should
                        be configured correctly for
                        Outlook 2007 and 2003.




CCE-1181-7   CCE-1181
                        The "Sign all e-mail           enabled/disabled
                        messages" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-1639-4   CCE-1639
                        The "URL for S/MIME            enabled/disabled
                        certificates" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-677-5    CCE-677
                        The "Ensure all S/MIME        enabled/disabled
                        signed messages have a
                        label" setting should be
                        configured correctly for
CCE-687-4    CCE-687    Outlook 2007.
                        The "S/MIME receipt           enabled/disabled
                        requests (Open message if
                        receipt can't be sent | Don't
                        open message if receipt
                        can't be sent | Always
                        prompt before sending
                        receipt | Never send
                        S/MIME )" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-1613-9   CCE-1613
                        The "Fortezza certificate     enabled/disabled
                        policies" setting should be
                        configured correctly for
CCE-1402-7   CCE-1402   Outlook 2007.
                        The "Require SuiteB           enabled/disabled
                        algorithms for S/MIME
                        operations" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-1658-4   CCE-1658
                        The "Missing CRLs" setting enabled/disabled
                        should be configured
                        correctly for Outlook 2007.
CCE-1662-6   CCE-1662
                        The "Missing CRLs -          enabled/disabled
                        Indicate a missing CRL as
                        a(n): (warning | error)"
                        setting should be
                        configured correctly for
CCE-1080-1   CCE-1080   Outlook 2007.
                        The "Missing root            enabled/disabled
                        certificates" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-1076-9   CCE-1076
                        The "Missing root             enabled/disabled
                        certificates - Indicate a
                        missing root certificate as
                        a(n): (neither error nor
                        warning | warning | error)"
                        setting should be
                        configured correctly for
CCE-1636-0   CCE-1636   Outlook 2007.
                        The "Promote Level 2        enabled/disabled
                        errors as errors, not
                        warnings" setting should be
                        configured correctly for
CCE-943-1    CCE-943    Outlook 2007.
                        The "Attachment Secure      enabled/disabled
                        Temporary Folder" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1591-7   CCE-1591
                        The "Display pictures and enabled/disabled
                        external content in HTML e-
                        mail" setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1133-8   CCE-1133
                        The "Automatically          enabled/disabled
                        download content for e-
                        mail from people in Safe
                        Senders and Safe
                        Recipients Lists" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-725-2    CCE-725
                        The "Do not permit          enabled/disabled
                        download of content from
                        safe zones" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-1347-4   CCE-1347
                        The "Block Trusted Zones" enabled/disabled
                        setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1475-3   CCE-1475
                        The "Include Internet in    enabled/disabled
                        Safe Zones for Automatic
                        Picture Download" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1497-7   CCE-1497
                        The "Include Intranet in    enabled/disabled
                        Safe Zones for Automatic
                        Picture Download" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1501-6   CCE-1501
                        The "Security setting for   enabled/disabled
                        macros (Always warn |
                        Never warn, disable all |
                        Warn for signed, disable
                        unsigned | No security
                        check)" setting should be
                        configured correctly for
CCE-1030-6   CCE-1030   Outlook 2007.
                        The "Enable links in e-mail enabled/disabled
                        messages" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-1052-0   CCE-1052
                        The "Apply macro security enabled/disabled
                        settings to macros, add-
                        ins, and SmartTags"
                        setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1462-1   CCE-1462
                        The "Automatically          enabled/disabled
                        configure profile based on
                        Active Directory Primary
                        SMTP address" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1281-5   CCE-1281
                        The "Do not allow users to enabled/disabled
                        change permissions on
                        folders" setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1303-7   CCE-1303
                        The "Enable RPC               enabled/disabled
                        encryption" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-1082-7   CCE-1082
                        The "Authentication with    enabled/disabled
                        Exchange Server
                        (Kerberos/NTLM Password
                        Authentication | Kerberos
                        Password Authentication |
                        NTLM Password
                        Authentication)" setting
                        should be configured
                        correctly for Outlook 2007.

CCE-1712-9   CCE-1712
                        The "Synchronize Outlook      enabled/disabled
                        RSS Feeds with Common
                        Feed List" setting should
                        be configured correctly for
                        Outlook 2007.
CCE-1131-2   CCE-1131
                        The "Turn off RSS feature" enabled/disabled
                        setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1620-4   CCE-1620
                        The "Automatically          enabled/disabled
                        download enclosures"
                        setting should be
                        configured correctly for
CCE-1541-2   CCE-1541   Outlook 2007.
                        The "Download full text of enabled/disabled
                        articles as HTML
                        attachments" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1311-0   CCE-1311
                        The "Automatically            enabled/disabled
                        download attachments"
                        setting should be
                        configured correctly for
                        Outlook 2007.
CCE-1682-4   CCE-1682
                        The "Do not include         enabled/disabled
                        Internet Calendar
                        integration in Outlook"
                        setting should be
                        configured correctly for
CCE-1461-3   CCE-1461   Outlook 2007.
                        The "Disable user entries enabled/disabled
                        to server list (Publish
                        default, allow others |
                        Publish default, disallow
                        others)" setting should be
                        configured correctly for
CCE-1041-3   CCE-1041   Outlook 2007.
                        The "Do not expand          enabled/disabled
                        distribution lists" setting
                        should be configured
                        correctly for Outlook 2007.
CCE-1565-1   CCE-1565
                        The "Save files in this       enabled/disabled
                        format (PowerPoint
                        Presentation (*.pptx) |
                        PowerPoint Macro-Enabled
                        Presentation (*.pptm) |
                        PowerPoint 97-2003
                        Presentation (*.ppt))"
                        setting should be
                        configured correctly for
CCE-1719-4   CCE-1719   PowerPoint 2007.
                        The "Number of                enabled/disabled
                        documents in the Recent
                        Documents list (0 - 50)"
                        setting should be
                        configured correctly for
CCE-1477-9   CCE-1477   PowerPoint 2007.
                        The "Determine whether to     enabled/disabled
                        force encrypted macros to
                        be scanned in Microsoft
                        PowerPoint Open XML
                        presentations" setting
                        should be configured
                        correctly for PowerPoint
CCE-1142-9   CCE-1142   2007.
                        The "Run Programs             enabled/disabled
                        (disable (don't run any
                        programs) | enable (prompt
                        user before running) |
                        enable all (run without
                        prompting))" setting should
                        be configured correctly for
                        PowerPoint 2007.
CCE-1649-3   CCE-1649
                        The "Make hidden markup enabled/disabled
                        visible" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1279-9   CCE-1279
                        The "Unblock automatic     enabled/disabled
                        download of linked images"
                        setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1451-4   CCE-1451
                        The "Disable all application enabled/disabled
                        add-ins" setting should be
                        configured correctly for
                        PowerPoint 2007.

CCE-1204-7   CCE-1204
                        The "Require that            enabled/disabled
                        application add-ins are
                        signed by Trusted
                        Publisher" setting should
                        be configured correctly for
CCE-1107-2   CCE-1107   PowerPoint 2007.
                        The "Disable Trust Bar       enabled/disabled
                        Notification for unsigned
                        application add-ins" setting
                        should be configured
                        correctly for PowerPoint
CCE-743-5    CCE-743    2007.
                        The "Allow Trusted           enabled/disabled
                        Locations not on the
                        computer" setting should
                        be configured correctly for
                        PowerPoint 2007.
CCE-747-6    CCE-747
                        The "Disable all trusted     enabled/disabled
                        locations" setting should be
                        configured correctly for
                        PowerPoint 2007.

CCE-782-3    CCE-782
                        The "Disable commands"        enabled/disabled
                        setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1327-6   CCE-1327
                        The "Disable commands - enabled/disabled
                        Office Button | PowerPoint
                        Options | Customize | All
                        Commands | Web Page
                        Preview" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1723-6   CCE-1723
                        The "Disable commands -       enabled/disabled
                        Office Button | Send |
                        Email" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1366-4   CCE-1366
                        The "Disable commands -       enabled/disabled
                        Insert | Links | Hyperlink"
                        setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1679-0   CCE-1679
                        The "Disable commands -       enabled/disabled
                        Review | Proofing |
                        Language" setting should
                        be configured correctly for
                        PowerPoint 2007.
CCE-1173-4   CCE-1173
                        The "Disable commands -       enabled/disabled
                        View | Macros | Macros"
                        setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1714-5   CCE-1714
                        The "Disable commands - enabled/disabled
                        Developer | Code | Macros"
                        setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1485-2   CCE-1485
                        The "Disable commands - enabled/disabled
                        Developer | Code | Macro
                        Security" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1687-3   CCE-1687
                        The "Disable commands -       enabled/disabled
                        Developer | Code | Visual
                        Basic" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1709-5   CCE-1709
                        The "Disable commands - enabled/disabled
                        Office Button | PowerPoint
                        Options | Customize | All
                        Commands | Document
                        Location" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1463-9   CCE-1463
                        The "Disable commands -       enabled/disabled
                        Disable shortcut keys"
                        setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1467-0   CCE-1467
                        The "Disable commands -       enabled/disabled
                        Ctrl+K (Insert | Links |
                        Hyperlink)" setting should
                        be configured correctly for
                        PowerPoint 2007.
CCE-1740-0   CCE-1740
                        The "Disable commands - enabled/disabled
                        Alt+F8 (Developer | Code |
                        Macros)" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1780-6   CCE-1780
                        The "Disable commands - enabled/disabled
                        Alt+F11 (Developer | Code
                        | Visual Basic)" setting
                        should be configured
                        correctly for PowerPoint
CCE-1661-8   CCE-1661   2007.
                        The "Block opening of pre- enabled/disabled
                        release versions of file
                        formats new to PowerPoint
                        2007" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1688-1   CCE-1688
                        The "Block opening of         enabled/disabled
                        Open Xml files types"
                        setting should be
                        configured correctly for
CCE-1701-2   CCE-1701   PowerPoint 2007.
                        The "Block opening of         enabled/disabled
                        Binary file types" setting
                        should be configured
                        correctly for PowerPoint
CCE-1348-2   CCE-1348   2007.
                        The "Block opening of Html enabled/disabled
                        file types" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1644-4   CCE-1644
                        The "Block opening of       enabled/disabled
                        Outlines" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1194-0   CCE-1194
                        The "Block opening of       enabled/disabled
                        Converters" setting should
                        be configured correctly for
                        PowerPoint 2007.
CCE-1216-1   CCE-1216
                        The "Block saving of Open enabled/disabled
                        Xml file types" setting
                        should be configured
                        correctly for PowerPoint
CCE-1506-5   CCE-1506   2007.
                        The "Block saving of Binary enabled/disabled
                        file types" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1136-1   CCE-1136
                        The "Block saving of Html enabled/disabled
                        file types" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1766-5   CCE-1766
                        The "Block saving of        enabled/disabled
                        Outlines" setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1180-9   CCE-1180
                        The "Block saving of       enabled/disabled
                        GraphicFilters" setting
                        should be configured
                        correctly for PowerPoint
CCE-1722-8   CCE-1722   2007.
                        The "Disable Slide Update" enabled/disabled
                        setting should be
                        configured correctly for
                        PowerPoint 2007.
CCE-1731-9   CCE-1731
                        The "Hidden text" setting   enabled/disabled
                        should be configured
                        correctly for Word 2007.
CCE-885-4    CCE-885
                        The "Save files in this        enabled/disabled
                        format (Word document
                        (*.docx) | Single Files Web
                        Page (*.mht) | Web Page
                        (*.htm; *.html) | Web Page,
                        Filtered (*.htm, *.html) |
                        Rich Text Format (*.rtf) |
                        Plain Text (*.txt) | Word
                        6.0/95 (*.doc) | Word
                        6.0/95 - Chinese
                        (Simplified) (*.doc) | Word
                        6.0/95 - Chinese
                        (Traditional) (*.doc) | Word
                        6.0/95 - Japanese (*.doc) |
                        Word 6.0/95 - Korean
                        (*.doc) | Word 97-2002 &
                        6.0/95 - RTF | Word 5.1 for
                        Macintosh (*.mcw) | Word
                        5.0 for Macintosh (*.mcw) |
                        Word 2.x for Windows
                        (*.doc) | Works 4.0 for
                        Windows (*.wps) |
                        WordPerfect 5.x for
                        Windows (*.doc) |
                        WordPerfect 5.1 for DOS
                        (*.doc) | Word 2007 Macro
                        Enabled Document
                        (*.docm) | Word 2007
                        Macro Free Template
                        (*.dotx) | Word 2007 Macro
                        Enabled Template (*.dotm)
CCE-1656-8   CCE-1656   | Word 97 - 2003
                        Document (*.doc) | Word
                        The "Number of                 enabled/disabled
                        documents in the Recent
                        Documents list (0-50)"
                        setting should be
                        configured correctly for
CCE-1537-0   CCE-1537   Word 2007.
                        The "Update automatic          enabled/disabled
                        links at Open" setting
                        should be configured
CCE-1249-2   CCE-1249   correctly for Word 2007.
                        The "Save smart tags in e-     enabled/disabled
                        mail" setting should be
                        configured correctly for
CCE-1509-9   CCE-1509   Word 2007.
                        The "Determine whether to enabled/disabled
                        force encrypted macros to
                        be scanned in Microsoft
                        Word Open XML
                        documents" setting should
                        be configured correctly for
CCE-1280-7   CCE-1280   Word 2007.
                        The "Disable all application enabled/disabled
                        add-ins" setting should be
                        configured correctly for
                        Word 2007.
CCE-1681-6   CCE-1681
                        The "Require that            enabled/disabled
                        application add-ins are
                        signed by Trusted
                        Publisher" setting should
                        be configured correctly for
CCE-1562-8   CCE-1562   Word 2007.
                        The "Disable Trust Bar       enabled/disabled
                        Notification for unsigned
                        application add-ins" setting
                        should be configured
                        correctly for Word 2007.
CCE-1333-4   CCE-1333
                        The "Allow Trusted            enabled/disabled
                        Locations not on the
                        computer" setting should
                        be configured correctly for
                        Word 2007.
CCE-1355-7   CCE-1355
                        The "Disable all trusted     enabled/disabled
                        locations" setting should be
                        configured correctly for
                        Word 2007.
CCE-1637-8   CCE-1637
                        The "Disable commands"        enabled/disabled
                        setting should be
                        configured correctly for
                        Word 2007.
CCE-1659-2   CCE-1659
                        The "Disable commands - enabled/disabled
                        Office Button | Word
                        Options | Customize | All
                        Commands | Save As Web
                        Page" setting should be
                        configured correctly for
CCE-1329-2   CCE-1329   Word 2007.
                        The "Disable commands - enabled/disabled
                        Office Button | Word
                        Options | Customize | All
                        Commands | Web Page
                        Preview" setting should be
                        configured correctly for
CCE-1632-9   CCE-1632   Word 2007.
                        The "Disable commands - enabled/disabled
                        Office Button | Send |
                        Email" setting should be
                        configured correctly for
                        Word 2007.
CCE-1425-8   CCE-1425
                        The "Disable commands -       enabled/disabled
                        Insert | Links | Hyperlink"
                        setting should be
                        configured correctly for
                        Word 2007.
CCE-1196-5   CCE-1196
                        The "Disable commands -       enabled/disabled
                        Review | Protect | Protect
                        Document" setting should
                        be configured correctly for
                        Word 2007.
CCE-936-5    CCE-936
                        The "Disable commands -       enabled/disabled
                        View | Macros | Macros"
                        setting should be
                        configured correctly for
                        Word 2007.
CCE-1354-0   CCE-1354
                        The "Disable commands - enabled/disabled
                        Developer | Code | Macros"
                        setting should be
                        configured correctly for
                        Word 2007.
CCE-1125-4   CCE-1125
                        The "Disable commands - enabled/disabled
                        Developer | Code | Record
                        Macro" setting should be
                        configured correctly for
                        Word 2007.
CCE-1742-6   CCE-1742
                        The "Disable commands - enabled/disabled
                        Developer | Code | Macro
                        Security" setting should be
                        configured correctly for
                        Word 2007.
CCE-1782-2   CCE-1782
                        The "Disable commands -     enabled/disabled
                        Developer | Code | Visual
                        Basic" setting should be
                        configured correctly for
                        Word 2007.
CCE-1306-0   CCE-1306
                        The "Disable commands - enabled/disabled
                        Developer | Templates |
                        Document Template"
                        setting should be
                        configured correctly for
CCE-1548-7   CCE-1548   Word 2007.
                        The "Disable shortcut keys" enabled/disabled
                        setting should be
                        configured correctly for
                        Word 2007.
CCE-1716-0   CCE-1716
                        The "Disable shortcut keys - enabled/disabled
                        Ctrl+F (Home | Editing |
                        Find)" setting should be
                        configured correctly for
                        Word 2007.
CCE-1597-4   CCE-1597
                        The "Disable shortcut keys - enabled/disabled
                        Ctrl+K (Insert | Links |
                        Hyperlink)" setting should
                        be configured correctly for
                        Word 2007.
CCE-1689-9   CCE-1689
                        The "Disable shortcut keys - enabled/disabled
                        Alt+F8 (Developer | Code |
                        Macros)" setting should be
                        configured correctly for
                        Word 2007.
CCE-1570-1   CCE-1570
                        The "Disable shortcut keys - enabled/disabled
                        Alt+F11 (Developer | Code
                        | Visual Basic)" setting
                        should be configured
                        correctly for Word 2007.
CCE-1720-2   CCE-1720
                        The "Block opening of pre- enabled/disabled
                        release versions of file
                        formats new to Word 2007"
                        setting should be
                        configured correctly for
CCE-1746-7   CCE-1746   Word 2007.
                        The "Block opening of      enabled/disabled
                        Open XML file types"
                        setting should be
                        configured correctly for
CCE-1504-0   CCE-1504   Word 2007.
                        The "Block opening of          enabled/disabled
                        Binary file types" setting
                        should be configured
                        correctly for Word 2007.
CCE-1654-3   CCE-1654
                        The "Block opening of          enabled/disabled
                        HTML file types" setting
                        should be configured
                        correctly for Word 2007.
CCE-1160-1   CCE-1160
                        The "Block opening of         enabled/disabled
                        Word 2003 XML file types"
                        setting should be
                        configured correctly for
CCE-958-9    CCE-958    Word 2007.
                        The "Block opening of RTF enabled/disabled
                        file types" setting should be
                        configured correctly for
                        Word 2007.
CCE-1579-2   CCE-1579
                        The "Block open             enabled/disabled
                        Converters" setting should
                        be configured correctly for
                        Word 2007.
CCE-984-5    CCE-984
                        The "Block opening of Text enabled/disabled
                        file types" setting should be
                        configured correctly for
                        Word 2007.
CCE-1072-8   CCE-1072
                        The "Block opening of          enabled/disabled
                        Internal file types" setting
                        should be configured
                        correctly for Word 2007.
CCE-1503-2   CCE-1503
                        The "Block opening of files enabled/disabled
                        before version" setting
                        should be configured
                        correctly for Word 2007.
CCE-1371-4   CCE-1371
                        The "Block saving of Open enabled/disabled
                        XML file types" setting
                        should be configured
                        correctly for Word 2007.
CCE-1019-9   CCE-1019
                        The "Block saving of Binary enabled/disabled
                        file types" setting should be
                        configured correctly for
                        Word 2007.
CCE-1684-0   CCE-1684
                        The "Block saving of HTML enabled/disabled
                        file types" setting should be
                        configured correctly for
                        Word 2007.
CCE-1675-8   CCE-1675
                        The "Block saving of Word enabled/disabled
                        2003 XML file types"
                        setting should be
                        configured correctly for
CCE-1200-5   CCE-1200   Word 2007.
                        The "Block saving of RTF enabled/disabled
                        file types" setting should be
                        configured correctly for
                        Word 2007.
CCE-1741-8   CCE-1741
                        The "Block saving of        enabled/disabled
                        Converters" setting should
                        be configured correctly for
                        Word 2007.
CCE-1231-0   CCE-1231
                        The "Block saving of Text enabled/disabled
                        file types" setting should be
                        configured correctly for
                        Word 2007.
CCE-1755-8   CCE-1755

                                                enabled/disabled
                        The InfoPath APTCA Assembly Whitelist setting should be configured correctly.




CCE-1169-2   CCE-1169
                                                  enabled/disabled
                        The Windows Internet Explorer Feature Control Opt-In (None | InfoPath.exe, Document Inform




CCE-1735-0   CCE-1735
                                                enabled/disabled
                        The InfoPath APTCA Assembly Whitelist Enforcement setting should be configured correctly.




CCE-1739-2   CCE-1739
                                                   setting should be
                        The Disable Package Repairenabled/disabled configured correctly.



CCE-933-2    CCE-933
                                                  enabled/disabled
                        The Disable user name and password setting should be configured correctly.




CCE-1563-6   CCE-1563
                                                  enabled/disabled
                        The Disable user name and password - excel.exe setting should be configured correctly.




CCE-1215-3   CCE-1215
                                                  enabled/disabled
                        The Disable user name and password - powerpnt.exe setting should be configured correctly.




CCE-1484-5   CCE-1484
                                                  enabled/disabled
                        The Disable user name and password - pptview.exe setting should be configured correctly.




CCE-1629-5   CCE-1629
                                                  enabled/disabled
                        The Disable user name and password - winword.exe setting should be configured correctly.




CCE-1762-4   CCE-1762
                                                  enabled/disabled
                        The Disable user name and password - outlook.exe setting should be configured correctly.




CCE-1660-0   CCE-1660
                                                  enabled/disabled
                        The Disable user name and password - spDesign.exe setting should be configured correctly.




CCE-1057-9   CCE-1057
                                                  enabled/disabled
                        The Disable user name and password - msaccess.exe setting should be configured correctly.




CCE-1285-6   CCE-1285
                                                     enabled/disabled
                        The Bind to object setting should be configured correctly.




CCE-1669-1   CCE-1669
                                                     enabled/disabled
                        The Bind to object - excel.exe setting should be configured correctly.




CCE-1691-5   CCE-1691
                                                    enabled/disabled
                        The Bind to object - powerpnt.exe setting should be configured correctly.




CCE-1338-3   CCE-1338
                                                     enabled/disabled
                        The Bind to object - pptview.exe setting should be configured correctly.




CCE-1717-8   CCE-1717
                                                    enabled/disabled
                        The Bind to object - winword.exe setting should be configured correctly.




CCE-1488-6   CCE-1488
                                                     enabled/disabled
                        The Bind to object - outlook.exe setting should be configured correctly.




CCE-1638-6   CCE-1638
                                                    enabled/disabled
                        The Bind to object - spDesign.exe setting should be configured correctly.




CCE-1647-7   CCE-1647
                                                   enabled/disabled
                        The Bind to object - msaccess.exe setting should be configured correctly.




CCE-1294-8   CCE-1294
                                                   should be configured correctly.
                        The Saved from URL settingenabled/disabled




CCE-1193-2   CCE-1193
                                                  enabled/disabled
                        The Saved from URL - excel.exe setting should be configured correctly.




CCE-1352-4   CCE-1352
                                                 enabled/disabled
                        The Saved from URL - powerpnt.exe setting should be configured correctly.




CCE-928-2    CCE-928
                                                  enabled/disabled
                        The Saved from URL - pptview.exe setting should be configured correctly.




CCE-1576-8   CCE-1576
                                                  enabled/disabled
                        The Saved from URL - pptview.exe setting should be configured correctly.




CCE-1100-7   CCE-1100
                                                  enabled/disabled
                        The Saved from URL - outlook.exe setting should be configured correctly.




CCE-1232-8   CCE-1232
                                                 enabled/disabled
                        The Saved from URL - spDesign.exe setting should be configured correctly.




CCE-1774-9   CCE-1774
                                                 enabled/disabled
                        The Saved from URL - msaccess.exe setting should be configured correctly.




CCE-906-8    CCE-906
                                                   enabled/disabled
                        The Navigate URL setting should be configured correctly.




CCE-1034-8   CCE-1034
                                                   enabled/disabled
                        The Navigate URL - excel.exe setting should be configured correctly.




CCE-1435-7   CCE-1435
                                                 enabled/disabled
                        The Navigate URL - powerpnt.exe setting should be configured correctly.




CCE-1708-7   CCE-1708
                                                  enabled/disabled
                        The Navigate URL - pptview.exe setting should be configured correctly.




CCE-808-6    CCE-808
                                                  enabled/disabled
                        The Navigate URL - winword.exe setting should be configured correctly.




CCE-1650-1   CCE-1650
                                                   enabled/disabled
                        The Navigate URL - outlook.exe setting should be configured correctly.




CCE-1223-7   CCE-1223
                                                  enabled/disabled
                        The Navigate URL - spDesign.exe setting should be configured correctly.




CCE-1764-0   CCE-1764
                                                 enabled/disabled
                        The Navigate URL - msaccess.exe setting should be configured correctly.




CCE-1769-9   CCE-1769
                                                   enabled/disabled
                        The Block popups setting should be configured correctly.




CCE-1152-8   CCE-1152
                                                   enabled/disabled
                        The Block popups - excel.exe setting should be configured correctly.




CCE-1566-9   CCE-1566
                                                  enabled/disabled
                        The Block popups - powerpnt.exe setting should be configured correctly.




CCE-1077-7   CCE-1077
                                                   enabled/disabled
                        The Block popups - pptview.exe setting should be configured correctly.




CCE-1606-3   CCE-1606
                                                  enabled/disabled
                        The Block popups - winword.exe setting should be configured correctly.




CCE-1738-4   CCE-1738
                                                   enabled/disabled
                        The Block popups - outlook.exe setting should be configured correctly.




CCE-1262-5   CCE-1262
                                                  enabled/disabled
                        The Block popups - spDesign.exe setting should be configured correctly.




CCE-1663-4   CCE-1663
                                                 enabled/disabled
                        The Block popups - msaccess.exe setting should be configured correctly.




CCE-1544-6   CCE-1544

                        The "Prevent users from
                        customizing attachment
                        security settings" setting
                        should be configured
CCE-1443-1   CCE-1443   correctly.                   1 = Enabled




                        The "Access: Macro
                        Security Level" setting      1 = Enabled - Low | 2
                        should be configured         = Enabled - Medium
CCE-1161-9   CCE-1161   correctly.                   | 3 = Enabled - High




                        The "Access: Trust all
                        installed add – ins and
                        templates" setting should    0 = Enabled | 1 =
CCE-1421-7   CCE-1421   be configured correctly.     Disabled




                        The "Excel: Macro Security 1 = Enabled - Low | 2
                        Level" setting should be   = Enabled - Medium
CCE-1571-9   CCE-1571   configured correctly.      | 3 = Enabled - High
                        The "Excel: Trust all
                        installed add – ins and
                        templates" setting should    0 = Enabled | 1 =
CCE-1721-0   CCE-1721   be configured correctly.     Disabled




                        The "Outlook: Macro
                        Security Level" setting      1 = Enabled - Low | 2
                        should be configured         = Enabled - Medium
CCE-1602-2   CCE-1602   correctly.                   | 3 = Enabled - High

                        The "Outlook: Trust all
                        installed add-ins and
                        templates" setting should   0 = Enabled | 1 =
CCE-1624-6   CCE-1624   be configured correctly.    Disabled
                                                    0 = Uses default
                                                    administrative
                                                    settings | 1 = Look
                                                    in the Outlook
                                                    Security Settings
                                                    folder | 2 = Look in
                        The "Outlook virus security the Outlook 10
                        settings" setting should be Security Settings
CCE-1522-2   CCE-1522   configured correctly.       folder

                                                    0 = Open message if
                                                    receipt can't be sent |
                                                    1 = Always prompt
                                                    before sending
                                                    receipt | 2 = Never
                                                    send S/MIME
                        The "S/MIME receipt         receipts | 3 = Don't
                        requests" setting should be open message if
CCE-1183-3   CCE-1183   configured correctly.       receipt can't be sent




                        The "PowerPoint: Macro
                        Security Level" setting      1 = Enabled - Low | 2
                        should be configured         = Enabled - Medium
CCE-1611-3   CCE-1611   correctly.                   | 3 = Enabled - High
                        The "PowerPoint: Trust all
                        installed add – ins and
                        templates" setting should    0 = Enabled | 1 =
CCE-1633-7   CCE-1633   be configured correctly.     Disabled

                        The "Publisher: Macro
                        Security Level" setting      1 = Enabled - Low | 2
                        should be configured         = Enabled - Medium
CCE-822-7    CCE-822    correctly.                   | 3 = Enabled - High


                        The "Publisher: Trust all
                        installed add–ins and
                        templates" setting should    0 = Enabled | 1 =
CCE-1734-3   CCE-1734   be configured correctly.     Disabled




                        The "Word: Macro Security 1 = Enabled - Low | 2
                        Level" setting should be  = Enabled - Medium
CCE-1628-7   CCE-1628   configured correctly.     | 3 = Enabled - High




                        The "Word: Trust all
                        installed add–ins and
                        templates" setting should    0 = Enabled | 1 =
CCE-1761-6   CCE-1761   be configured correctly.     Disabled

                        The "Store random number
                        to improve merge
                        accuracy" setting should be 0 = Enabled | 1 =
CCE-1302-9   CCE-1302   configured correctly.       Disabled

                        The "Prevent Users from
                        Changing Office Encryption
                        Settings" setting should be 0 = Disabled | 1 =
CCE-1307-8   CCE-1307   configured correctly.       Enabled
                                                                       Microsoft Threats and
             CCE Technical Mechanisms
                                                                      Countermeasures guide




2007: GPO Settings:Computer Configuration / Administrative
Templates / Classic Administrative Templates / Microsoft
Office 2007 System / Security Settings , Registry Keys:
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Office\1
2.0\Common\VbaOff 2003: (1) Computer
Configuration\Administrative Templates\Microsoft Office
2003\Security Settings\Disable VBA for Office applications (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Common -
VbaOff (3) User Configuration\Administrative
Templates\Microsoft Office 2003\Security Settings\Disable
VBA for Office applications (4)                                  Table 1.124. Disable VBA for Office
HKCU\Software\Policies\Microsoft\Office\11.0\Common -            applications, Table 2.5. Disable VBA for
VbaOff                                                           Office applications
2007: GPO Settings:User Configuration / Administrative
Templates / Classic Administrative Templates / Microsoft
Office 2007 system / Security /ActiveX Control
InitializationSettings , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\C
ommon\Security\UFIControls 2003: (1) User
Configuration\Administrative Templates\Microsoft Office
2003\Security Settings\ActiveX Control Initialization (2)
HKCU\Software\Policies\Microsoft\Office\Common\Security -
UFIControls                                                      Table 1.3. ActiveX Control Initialization
GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office 2007 /
Privacy / Trust Center , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1           Table 1.148. Enable Customer
2.0\Common\QMEnable                                              Experience Improvement Program
GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office 2007 /
Privacy / Trust Center , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1           Table 1.23. Automatically receive small
2.0\Common\UpdateReliabilityData                                 updates to improve reliability



GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office 2007
system / Tools / Options / General / Service Options / Online
Content , Registry Keys:
HKEY_CURRENT_USER\Softtware\Polices\Microsoft\Office\1
2.0\Common\Internet\UseOnlineContent                             Table 1.179. Online content options
GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office Access
2007 / Application Settings / Security / Trust Center , Registry
Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1             Table 1.234. VBA Macro Warning
2.0\Access\Security\VBAWarnings                                    Settings




2007: GPO Settings:User Configuration / Administrative
Templates / Classic Administrative Templates / Microsoft
Office Excel 2007 / Excel Options / Security / Trust Center ,
Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1             Table 1.234. VBA Macro Warning
2.0\Excel\Security\VBAWarnings                                     Settings
2007GPO Settings:User Configuration / Administrative
Templates / Classic Administrative Templates / Microsoft
Office Excel 2007 / Excel Options / Security / Trust Center ,
Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1
2.0\Excel\Security\AccessVBOM 2003: (1) Computer
Configuration\Administrative Templates\Microsoft Office
2003\Security Settings\Excel: Trust access to Visual Basic
Project (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Excel\Security -
AccessVBOM (3) User Configuration\Administrative
Templates\Microsoft Office Excel
2003\Tools\Macros\Security\Trust access to Visual Basic
Project (4)
HKCU\Software\Policies\Microsoft\Office\11.0\Excel\Security -      Table 1.225. Trust access to Visual
AccessVBOM                                                         Basic Project
GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office
PowerPoint 2007 / PowerPoint Options / Security / Trust
Center , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1         Table 1.234. VBA Macro Warning
2.0\PowerPoint\Security\VBAWarnings                            Settings
GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office
PowerPoint 2007 / PowerPoint Options / Security / Trust
Center , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1         Table 1.225. Trust access to Visual
2.0\PowerPoint\Security\AccessVBOM                             Basic Project
GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office Outlook
2007 / Security , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1
2.0\Outlook\Security\EnableRememberPwd
2007: GPO Settings:User Configuration / Administrative
Templates / Classic Administrative Templates / Microsoft
Office Outlook 2007 / Security , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1
2.0\Outlook\Security\AddinTrust 2003: (1) User
Configuration\Administrative Templates\Microsoft Office
Outlook 2003\Tools\Options\Security\Configure Add-In Trust
Level (2)
HKCU\Software\Policies\Microsoft\Office\11.0\Outlook\Securit
y - AddinTrust                                                 Table 1.72. Configure trusted add-ins
GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office Outlook
2007 / Security , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1
2.0\Outlook\Security\EnableRememberPwd

GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office Outlook
2007 / Security / Cryptography , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1         Table 1.173. Minimum encryption
2.0\Outlook\Security\MinEncKey                                 settings

GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office Outlook
2007 / Security / Cryptography , Registry Keys:                Table 1.134. Do not check e-mail
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1         address against address of certificates
2.0\Outlook\Security\SupressNameChecks                         being using
2007: GPO Settings:User Configuration / Administrative
Templates / Classic Administrative Templates / Microsoft
Office Outlook 2007 / Security / Cryptography , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1
2.0\Outlook\Security\ClearSign 2003: (1) User
Configuration\Administrative Templates\Microsoft Office
Outlook 2003\Tools\Options\Security\Cryptography\Send all
signed messages as clear signed messages (2)
HKCU\Software\Policies\Microsoft\Office\11.0\Outlook\Securit      Table 1.214. Send all signed messages
y - ClearSign                                                     as clear signed messages

GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office Outlook
2007 / Security / Cryptography , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1            Table 1.198. Request an S/MIME
2.0\Outlook\Security\RequestSecureReceipt                         receipt for all S/MIME signed messages


2007: GPO Settings:User Configuration / Administrative
Templates / Classic Administrative Templates / Microsoft
Office Outlook 2007 / Security / Cryptography , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1
2.0\Outlook\Security\PublishToGalDisabled 2003: (1) User
Configuration\Administrative Templates\Microsoft Office
Outlook 2003\Tools\Options\Security\Cryptography\Disable
'Publish to GAL' button (2)
HKCU\Software\Policies\Microsoft\office\11.0\outlook\Security -   Table 1.135. Do not display 'Publish to
PublishToGalDisabled                                              GAL' button


2007: GPO Settings:User Configuration / Administrative
Templates / Classic Administrative Templates / Microsoft
Office Outlook 2007 / Security / Cryptography , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1
2.0\Outlook\Security\WarnAboutInvalid 2003: (1) User
Configuration\Administrative Templates\Microsoft Office
Outlook 2003\Tools\Options\Security\Cryptography\Signature
Warning (2)
HKCU\Software\Policies\Microsoft\Office\11.0\Outlook\Securit
y - WarnAboutInvalid                                              Table 1.220. Signature Warning
2007: GPO Settings:User Configuration / Administrative
Templates / Classic Administrative Templates / Microsoft
Office Outlook 2007 / Security / Cryptography , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1
2.0\Outlook\Security\ConvertSMIMEBlobSignedIcons 2003:
(1) User Configuration\Administrative Templates\Microsoft
Office Outlook
2003\Tools\Options\Security\Cryptography\Enable
cryptography icons (2)
HKCU\Software\Policies\Microsoft\Office\11.0\Outlook\Securit
y - ConvertSMIMEBlobSignedIcons


GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office Outlook
2007 / Security / Cryptography / Signature Status Dialog Box ,
Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1           Table 1.204. Retrieving CRLs
2.0\Outlook\Security\UseCRLChasing                               (Certificate Revocation Lists)




GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office Word
2007 / Word Options / Security / Trust Center , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1           Table 1.234. VBA Macro Warning
2.0\Word\Security\VBAWarnings                                    Settings
2007: GPO Settings:User Configuration / Administrative
Templates / Classic Administrative Templates / Microsoft
Office Word 2007 / Word Options / Security / Trust Center ,
Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Policies\Microsoft\
Office\12.0\Word\Security\AccessVBOM 2003: (1) Computer
Configuration\Administrative Templates\Microsoft Office
2003\Security Settings\Word: Trust access to Visual Basic
Project (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Word\Security -
AccessVBOM (3) User Configuration\Administrative
Templates\Microsoft Office Word
2003\Tools\Macro\Security\Trust access to Visual Basic
Project (4)
HKCU\Software\Policies\Microsoft\Office\11.0\Word\Security -     Table 1.225. Trust access to Visual
AccessVBOM                                                       Basic Project
2007: GPO Settings:User Configuration / Administrative
Templates / Classic Administrative Templates / Microsoft
Office Word 2007 / Word Options / Security , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1
2.0\Word\Options\vpref\fWarnRevisions_1805_1 2003: (1)
User Configuration\Administrative Templates\Microsoft Office
Word 2003\Tools\Options\Security\Warn before printing or
saving or sending a file that contains tracked changes or
comments (2)
HKCU\Software\Policies\Microsoft\Office\11.0\Word\Options\v
pre
GPO Settings:User Configuration / Administrative Templates /
Classic Administrative Templates / Microsoft Office 2007 /
Miscellaneous , Registry Keys:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\C           Table 1.64. Block updates from the
ommon\OfficeUpdate\BlockUpdates                                  Office Update Site from applying
(1) User Configuration\Administrative Templates\Microsoft        Table 1.230. Underline hyperlinks
Office Access 2007\Application Settings\Web
Options\General\Underline hyperlinks (2)
Software\Policies\Microsoft\Office\12.0\Access\Internet
(1) User Configuration\Administrative Templates\Microsoft
Office Access 2007\Application
Settings\General\General\Number of documents in the Recent
Documents list (0-9) (2)
Software\Policies\Microsoft\Office\12.0\Access\Settings

(1) User Configuration\Administrative Templates\Microsoft        Table 1.120. Disable Trust Bar
Office Access 2007\Application Settings\Security\Trust           Notification for unsigned application add-
Center\Disable Trust Bar Notification for unsigned application   ins
add-ins (2)
Software\Policies\Microsoft\Office\12.0\Access\Security

(1) User Configuration\Administrative Templates\Microsoft        Table 1.87. Disable all application add-
Office Access 2007\Application Settings\Security\Trust           ins
Center\Disable all application add-ins (2)
Software\Policies\Microsoft\Office\12.0\Access\Security

(1) User Configuration\Administrative Templates\Microsoft        Table 1.200. Require that application
Office Access 2007\Application Settings\Security\Trust           add-ins are signed by Trusted Publisher
Center\Require that application add-ins are signed by Trusted
Publisher (2)
Software\Policies\Microsoft\Office\12.0\Access\Security

(1) User Configuration\Administrative Templates\Microsoft        Table 1.89. Disable all trusted locations
Office Access 2007\Application Settings\Security\Trust
Center\Trusted LocationsDisable all trusted locations (2)
Software\Policies\Microsoft\Office\12.0\Access\Security\Truste
d Locations
(1) User Configuration\Administrative Templates\Microsoft        Table 1.11. Allow Trusted Locations not
Office Access 2007\Application Settings\Security\Trust           on the computer
Center\Trusted Locations\Allow Trusted Locations not on the
computer (2)
Software\Policies\Microsoft\Office\12.0\Access\Security\Truste
d Locations

(1) User Configuration\Administrative Templates\Microsoft        Table 1.176. Modal Trust Decision Only
Office Access 2007\Application Settings\Security\Trust
Center\Trusted Locations\Modal Trust Decision Only (2)
Software\Policies\Microsoft\Office\12.0\Access\Security\Truste
d Locations

(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office Access 2007\Disable items in user
interface\Predefined\Disable commands (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledCmdB
arItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office Access 2007\Disable items in user
interface\Predefined\Disable commands - Office Button | E-
Mail (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledCmdB
arItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office Access 2007\Disable items in user
interface\Predefined\Disable commands - Office Button |
Access Options | Customize | All Commands | Insert Hyperlink
(2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledCmdB
arItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office Access 2007\Disable items in user
interface\Predefined\Disable commands - Database Tools |
Database Tools | Encrypt with Password (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledCmdB
arItemsCheckBoxes

(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office Access 2007\Disable items in user
interface\Predefined\Disable commands - Database Tools |
Administer | Users and Permission | User and Group
Permissions (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledCmdB
arItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft       Table 1.94. Disable commands
Office Access 2007\Disable items in user
interface\Predefined\Disable commands - Database Tools |
Administer | Users and Permissions | User and Group
Accounts (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledCmdB
arItemsCheckBoxes

(1) User Configuration\Administrative Templates\Microsoft       Table 1.94. Disable commands
Office Access 2007\Disable items in user
interface\Predefined\Disable commands - Database Tools |
Administer | Users and Permission | User-Level Security
Wizard... (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledCmdB
arItemsCheckBoxes

(1) User Configuration\Administrative Templates\Microsoft       Table 1.94. Disable commands
Office Access 2007\Disable items in user
interface\Predefined\Disable commands - Database Tools |
Database Tools | Encode/Decode Database (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledCmdB
arItemsCheckBoxes

(1) User Configuration\Administrative Templates\Microsoft       Table 1.94. Disable commands
Office Access 2007\Disable items in user
interface\Predefined\Disable commands - Database Tools |
Macro | Visual Basic (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledCmdB
arItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft       Table 1.94. Disable commands
Office Access 2007\Disable items in user
interface\Predefined\Disable commands - Database Tools |
Macro | Run Macro (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledCmdB
arItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Access 2007\Disable items in user
interface\Predefined\Database Tools | Macro | Convert Macros
to Visual Basic (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledCmdB
arItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Access 2007\Disable items in user
interface\Predefined\Database Tools | Macro | Create Shortcut
Menu from Macro (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledCmdB
arItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft       Table 1.114. Disable shortcut keys
Office Access 2007\Disable items in user
interface\Predefined\Disable shortcut keys (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledShortc
utKeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft       Table 1.114. Disable shortcut keys
Office Access 2007\Disable items in user
interface\Predefined\Disable commands - Ctrl+K (Office
Button | Access Options | Customize | All Commands | Insert
Hyperlinks) (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledShortc
utKeysCheckBoxes


(1) User Configuration\Administrative Templates\Microsoft       Table 1.114. Disable shortcut keys
Office Access 2007\Disable items in user
interface\Predefined\Disable commands - Alt+F11 (Database
Tools | Macro | Visual Basic) (2)
Software\Policies\Microsoft\Office\12.0\Access\DisabledShortc
utKeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft       Table 1.80. Default file format
Office Access 2007\Miscellaneous\Default file format (Access
2007 | Access 2002-2003) (2)
Software\Policies\Microsoft\Office\12.0\Access\Settings


(1) User Configuration\Administrative Templates\Microsoft       Table 1.141. Do not prompt to convert
Office Access 2007\Miscellaneous\Do not prompt to convert       older databases
older databases (2)
Software\Policies\Microsoft\Office\12.0\Access\Settings

(1) User Configuration\Administrative Templates\Microsoft       Table 1.164. Internet and network paths
Office Excel 2007\Excel Options\Proofing\Autocorrect            as hyperlinks
Options\Internet and network paths as hyperlinks (2)
Software\Policies\Microsoft\Office\12.0\Excel\Options


(1) User Configuration\Administrative Templates\Microsoft       Table 1.211. Save Excel files as
Office Excel 2007\Excel Options\Save\Save Excel files as
(Excel Workbook (*.xlsx) | Excel Macro-Enabled Workbook
(*.xlsm) | Excel Binary Workbook (*.xlsb) | Web Page (*.htm;
*.html) | Excel 97-2003 Workbook (*.xls) | Excel 5.0/95
Workbook (*.xls)) (2)
Software\Policies\Microsoft\Office\12.0\Excel\Options




(1) User Configuration\Administrative Templates\Microsoft       Table 1.91. Disable AutoRepublish
Office Excel 2007\Excel Options\Save\Disable AutoRepublish
(2) Software\Policies\Microsoft\Office\12.0\Excel\Options
(1) User Configuration\Administrative Templates\Microsoft           Table 1.25. AutoRepublish Warning
Office Excel 2007\Excel Options\Save\AutoRepublish Warning          Alert
Alert (Always show the alert before publishing | Never show
the alert before publishing)
 (2) Software\Policies\Microsoft\Office\12.0\Excel\Options




(1) User Configuration\Administrative Templates\Microsoft           Table 1.81. Determine whether to force
Office Excel 2007\Excel Options\Security\Determine whether          encrypted macros to be scanned in
to force encrypted macros to be scanned in Microsoft Excel          Microsoft Excel Open XML workbooks
Open XML workbooks (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security


(1) User Configuration\Administrative Templates\Microsoft           Table 1.155. Force file extension to
Office Excel 2007\Excel Options\Security\Force file extension       match file type
to match file type (Allow different | Allow different, but warn |
Always match file type) (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security


(1) User Configuration\Administrative Templates\Microsoft           Table 1.221. Store macro in Personal
Office Excel 2007\Excel Options\Security\Trust Center\Store         Macro Workbook by default
macro in Personal Macro Workbook by default (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security

(1) User Configuration\Administrative Templates\Microsoft           Table 1.87. Disable all application add-
Office Excel 2007\Excel Options\Security\Trust Center\Disable       ins
all application add-ins (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security

(1) User Configuration\Administrative Templates\Microsoft           Table 1.200. Require that application
Office Excel 2007\Excel Options\Security\Trust                      add-ins are signed by Trusted Publisher
Center\Require that application add-ins are signed by Trusted
Publisher (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security

(1) User Configuration\Administrative Templates\Microsoft           Table 1.120. Disable Trust Bar
Office Excel 2007\Excel Options\Security\Trust Center\Disable       Notification for unsigned application add-
Trust Bar Notification for unsigned application add-ins (2)         ins
Software\Policies\Microsoft\Office\12.0\Excel\Security


(1) User Configuration\Administrative Templates\Microsoft           Table 1.11. Allow Trusted Locations not
Office Excel 2007\Excel Options\Security\Trust Center\Trusted       on the computer
LocationsAllow Trusted Locations not on the computer (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\Trusted
Locations
(1) User Configuration\Administrative Templates\Microsoft        Table 1.89. Disable all trusted locations
Office Excel 2007\Excel Options\Security\Trust Center\Trusted
LocationsDisable all trusted locations (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\Trusted
Locations
(1) User Configuration\Administrative Templates\Microsoft        Table 1.159. Ignore other applications
Office Excel 2007\Excel Options\Advanced\Ignore other
applications (2)
Software\Policies\Microsoft\Office\12.0\Excel\Options\BinaryO
ptions
(1) User Configuration\Administrative Templates\Microsoft        Table 1.17. Ask to update automatic
Office Excel 2007\Excel Options\Advanced\Ask to update           links
automatic links (2)
Software\Policies\Microsoft\Office\12.0\Excel\Options
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Excel Options\Advanced\Number of
documents in the Recent Documents list (0-17) (2)
Software\Policies\Microsoft\Office\12.0\Excel\File MRU


(1) User Configuration\Administrative Templates\Microsoft        Table 1.210. Save any additional data
Office Excel 2007\Excel Options\Advanced\Web                     necessary to maintain formulas
Options…\GeneralSave any additional data necessary to
maintain formulas (2)
Software\Policies\Microsoft\Office\12.0\Excel\Internet

(1) User Configuration\Administrative Templates\Microsoft        Table 1.169. Load pictures from Web
Office Excel 2007\Excel Options\Advanced\Web                     pages not created in Excel
Options…\GeneralLoad pictures from Web pages not created
in Excel (2)
Software\Policies\Microsoft\Office\12.0\Excel\Internet
(1) User Configuration\Administrative Templates\Microsoft        Table 1.143. Do not show data
Office Excel 2007\Data Recovery\Do not show data extraction      extraction options when opening corrupt
options when opening corrupt workbooks (2)                       workbooks
Software\Policies\Microsoft\Office\12.0\Excel\Options


(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Data Recovery\Assume structured storage
format of workbook is intact when recovering data (2)
Software\Policies\Microsoft\Office\12.0\Excel\Options


(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Data Recovery\Corrupt formula conversion
(Convert unrecoverable references to: values | #REF or
#NAME) (2)
Software\Policies\Microsoft\Office\12.0\Excel\Options
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Data Access Security\Connection File
Locations (2)
Software\Policies\Microsoft\Office\Common\Server
Links\Published
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Data Access Security\Automatic Query
Refresh (Prompt for all workbooks | Do not prompt; do not
allow auto refresh | Do not prompt; allow auto refresh) (2)
Software\Policies\Microsoft\Office\Common\Server
Links\Published



(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - Office Button | Excel
Options | Customize | All Commands | Save as Web Page (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes

(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - Office Button | Excel
Options | Customize | All Commands | Web Page Preview (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes

(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - Office Button | Send
| Email (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - Insert | Links |
Hyperlink (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - Review | Changes |
Protect Sheet (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - Review | Changes |
Protect Workbook (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - Review | Changes |
Protect and Share Workbook (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - View | Macros |
Macros (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - Developer | Code |
Macros (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - Developer | Code |
Record Macro (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - Developer | Code |
Macro Security (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - Developer | Code |
Visual Basic (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Disable items in user
interface\Predefined\Disable commands - Office Button | Excel
Options | Customize | All Commands | Document Location (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.114. Disable shortcut keys
Office Excel 2007\Disable items in user
interface\Predefined\Disable shortcut keys (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledShortcut
KeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.114. Disable shortcut keys
Office Excel 2007\Disable items in user
interface\Predefined\Disable shortcut keys - Ctrl+K (Insert |
Links | Hyperlink) (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledShortcut
KeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.114. Disable shortcut keys
Office Excel 2007\Disable items in user
interface\Predefined\Disable shortcut keys - Alt+F8 (Developer
| Code | Macros) (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledShortcut
KeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.114. Disable shortcut keys
Office Excel 2007\Disable items in user
interface\Predefined\Disable shortcut keys - Alt+F11
(Developer | Code | Visual Basic) (2)
Software\Policies\Microsoft\Office\12.0\Excel\DisabledShortcut
KeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.34. Block opening of files
Office Excel 2007\Block file formats\Open\Block opening of       created by pre-release versions of Excel
pre-release versions of file formats new to Excel 2007 (2)       2007
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileOpe
nBlock

(1) User Configuration\Administrative Templates\Microsoft        Table 1.38. Block opening of Open XML
Office Excel 2007\Block file formats\Open\Block opening of       file types
Open XML file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft        Table 1.29. Block opening of Binary 12
Office Excel 2007\Block file formats\Open\Block opening of       file types
Binary 12 file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft        Table 1.30. Block opening of Binary file
Office Excel 2007\Block file formats\Open\Block opening of       types
Binary file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft        Table 1.35. Block opening of Html and
Office Excel 2007\Block file formats\Open\Block opening of       Xmlss files types
Html and Xmlss files types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft        Table 1.49. Block opening of Xml file
Office Excel 2007\Block file formats\Open\Block opening of       types
Xml file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft        Table 1.32. Block opening of DIF and
Office Excel 2007\Block file formats\Open\Block opening of       SYLK file types
DIF and SYLK file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft        Table 1.46. Block opening of Text file
Office Excel 2007\Block file formats\Open\Block opening of       types
Text file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft        Table 1.48. Block opening of Xll file type
Office Excel 2007\Block file formats\Open\Block opening of Xll
file type (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft        Table 1.57. Block saving of Open Xml
Office Excel 2007\Block file formats\Save\Block saving of        file types
Open Xml file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft        Table 1.52. Block saving of Binary12 file
Office Excel 2007\Block file formats\Save\Block saving of        types
Binary12 file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Block file formats\Save\Block saving of
Binary file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft        Table 1.55. Block saving of Html and
Office Excel 2007\Block file formats\Save\Block saving of Html   Xmlss file types
and Xmlss file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Block file formats\Save\Block saving Xml
file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft        Table 1.50. Block saving DIF and SYLK
Office Excel 2007\Block file formats\Save\Block saving DIF       file types
and SYLK file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft         Table 1.60. Block saving of Text file
Office Excel 2007\Block file formats\Save\Block saving of Text    types
file types (2)
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Miscellaneous\Locally cache network file
storages (2)
Software\Policies\Microsoft\Office\12.0\Excel\Options

(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Miscellaneous\Locally cache PivotTable
reports (2)
Software\Policies\Microsoft\Office\12.0\Excel\Options

(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Miscellaneous\OLAP PivotTable User
Defined Function (UDF) security setting (Allow ALL UDFs |
Allow safe UDFs only | Allow NO UDFs) (2)
Software\Policies\Microsoft\Office\12.0\Excel\Options



(1) User Configuration\Administrative Templates\Microsoft
Office Excel 2007\Miscellaneous\Recognize SmartTags (2)
Software\Policies\Microsoft\Office\12.0\Excel\Options

(1) User Configuration\Administrative Templates\Microsoft
Office InfoPath 2007\Tools | Options\General\Number of
documents in the Recent Documents list (0 - 9) (2)
Software\Policies\Microsoft\Office\12.0\InfoPath


(1) User Configuration\Administrative Templates\Microsoft         Table 1.178. Offline Mode status
Office InfoPath 2007\Tools | Options\Advanced\Offline\Offline
Mode status (Disabled | Enabled, InfoPath in Offline Mode |
Enabled, InfoPath not in Offline Mode) (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Editor\Offline



(1) User Configuration\Administrative Templates\Microsoft         Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft         Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - File | Print (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - File | Send to Mail
Recipient (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - File | Open from
SharePoint Site (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - File | Print Preview
(2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - File | Page Setup
(2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - Insert | Hyperlinks...
(2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - Tools | Set
Language (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - Tools | Customize...
(2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - Tools | Options... (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - Help | Microsoft
Office Online (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - Office Diagnostics
(2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - Help | Activate
Product... (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable commands - Print Default (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledCmd
BarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.114. Disable shortcut keys
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable shortcut keys (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledShort
cutKeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.114. Disable shortcut keys
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable shortcut keys - Print Shortcut
(Ctrl+P) (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledShort
cutKeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.114. Disable shortcut keys
Office InfoPath 2007\Disable items in user
interface\Predefined\Disable shortcut keys - Insert Hyperlink
Shortcut (Ctrl+K) (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\DisabledShort
cutKeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.73. Control behavior for
Office InfoPath 2007\Security\Control behavior for Windows       Windows SharePoint Services gradual
SharePoint Services gradual upgrade (Allow redirections to       upgrade
any location | Allow redirections to Intranet only | Block all
redirections) (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security
(1) User Configuration\Administrative Templates\Microsoft            Table 1.109. Disable opening of
Office InfoPath 2007\Security\Disable opening of solutions           solutions from the Internet security zone
from the Internet security zone (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security


(1) User Configuration\Administrative Templates\Microsoft            Table 1.102. Disable fully trusted
Office InfoPath 2007\Security\Disable fully trusted solutions full   solutions full access to computer
access to computer (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security

(1) User Configuration\Administrative Templates\Microsoft
Office InfoPath 2007\Security\Allow the use of ActiveX Custom
Controls in InfoPath forms (2)
Software\Policies\Microsoft\Office\12.0\InfoPath


(1) User Configuration\Administrative Templates\Microsoft
Office InfoPath 2007\Security\Run forms in restricted mode if
they do not specify a publish location and use only features
introduced before InfoPath 2003 SP1 (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security




(1) User Configuration\Administrative Templates\Microsoft            Table 1.7. Allow file types as
Office InfoPath 2007\Security\Allow file types as attachments        attachments to forms
to forms (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security

(1) User Configuration\Administrative Templates\Microsoft            Table 1.62. Block specific file types as
Office InfoPath 2007\Security\Block specific file types as           attachments to forms
attachments to forms (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security

(1) User Configuration\Administrative Templates\Microsoft            Table 1.186. Prevent users from
Office InfoPath 2007\Security\Prevent users from allowing            allowing unsafe file types to be attached
unsafe file types to be attached to forms (2)                        to forms
Software\Policies\Microsoft\Office\12.0\InfoPath\Security


(1) User Configuration\Administrative Templates\Microsoft
Office InfoPath 2007\Security\Display a warning that a form is
digitally signed (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security
(1) User Configuration\Administrative Templates\Microsoft          Table 1.74. Control behavior when
Office InfoPath 2007\Security\Control behavior when opening        opening forms in the Internet security
forms in the Internet security zone (Block | Prompt | Allow) (2)   zone
Software\Policies\Microsoft\Office\12.0\InfoPath\Open
Behaviors


(1) User Configuration\Administrative Templates\Microsoft          Table 1.75. Control behavior when
Office InfoPath 2007\Security\Control behavior when opening        opening forms in the Intranet security
forms in the Intranet security zone (Block | Prompt | Allow) (2)   zone
Software\Policies\Microsoft\Office\12.0\InfoPath\Open
Behaviors


(1) User Configuration\Administrative Templates\Microsoft
Office InfoPath 2007\Security\Control behavior when opening
forms in the Local Machine security zone (Block | Prompt |
Allow) (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Open
Behaviors


(1) User Configuration\Administrative Templates\Microsoft          Table 1.76. Control behavior when
Office InfoPath 2007\Security\Control behavior when opening        opening forms in the Trusted Site
forms in the Trusted Site security zone (Block | Prompt | Allow)   security zone
(2) Software\Policies\Microsoft\Office\12.0\InfoPath\Open
Behaviors


(1) User Configuration\Administrative Templates\Microsoft          Table 1.26. Beaconing UI for forms
Office InfoPath 2007\Security\Beaconing UI for forms opened        opened in InfoPath
in InfoPath (Never show beaconing UI | Always show
beaconing UI | Show UI if Form Template is from Internet
Zone) (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security



(1) User Configuration\Administrative Templates\Microsoft          Table 1.27. Beaconing UI for forms
Office InfoPath 2007\Security\Beaconing UI for forms opened        opened in InfoPath Editor ActiveX
in InfoPath Editor ActiveX (Never show beaconing UI | Always
show beaconing UI | Show UI if Form Template is from
Internet Zone) (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security
(1) User Configuration\Administrative Templates\Microsoft         Table 1.87. Disable all application add-
Office InfoPath 2007\Security\Trust Center\Disable all            ins
application add-ins (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security

(1) User Configuration\Administrative Templates\Microsoft         Table 1.200. Require that application
Office InfoPath 2007\Security\Trust Center\Require that           add-ins are signed by Trusted Publisher
application add-ins are signed by Trusted Publisher (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security


(1) User Configuration\Administrative Templates\Microsoft         Table 1.120. Disable Trust Bar
Office InfoPath 2007\Security\Trust Center\Disable Trust Bar      Notification for unsigned application add-
Notification for unsigned application add-ins (2)                 ins
Software\Policies\Microsoft\Office\12.0\InfoPath\Security


(1) User Configuration\Administrative Templates\Microsoft         Table 1.77. Control behavior when
Office InfoPath 2007\Disable items in user interface\Control      opening InfoPath e-mail forms
behavior when opening InfoPath e-mail forms containing code       containing code or script
or script (Run without prompting | Prompt before running |
Never run) (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security



(1) User Configuration\Administrative Templates\Microsoft         Table 1.112. Disable sending form
Office InfoPath 2007\Disable items in user interface\Disable      template with e-mail forms
sending form template with e-mail forms (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Deployment


(1) User Configuration\Administrative Templates\Microsoft         Table 1.97. Disable dynamic caching of
Office InfoPath 2007\Disable items in user interface\Disable      the form template in InfoPath e-mail
dynamic caching of the form template in InfoPath e-mail forms     forms
(2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Deployment


(1) User Configuration\Administrative Templates\Microsoft         Table 1.113. Disable sending InfoPath
Office InfoPath 2007\Disable items in user interface\Disable      2003 Forms as e-mail forms
sending InfoPath 2003 Forms as e-mail forms (2)
Software\Policies\Microsoft\Office\12.0\InfoPath


(1) User Configuration\Administrative Templates\Microsoft         Table 1.101. Disable e-mail forms
Office InfoPath 2007\Disable items in user interface\Disable e-   running in restricted security level
mail forms running in restricted security level (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security
(1) User Configuration\Administrative Templates\Microsoft         Table 1.99. Disable e-mail forms from
Office InfoPath 2007\Disable items in user interface\Disable e-   the Internet security zone
mail forms from the Internet security zone (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security

(1) User Configuration\Administrative Templates\Microsoft         Table 1.100. Disable e-mail forms from
Office InfoPath 2007\Disable items in user interface\Disable e-   the Intranet security zone
mail forms from the Intranet security zone (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security

(1) User Configuration\Administrative Templates\Microsoft         Table 1.98. Disable e-mail forms from
Office InfoPath 2007\Disable items in user interface\Disable e-   the Full Trust security zone
mail forms from the Full Trust security zone (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security


(1) User Configuration\Administrative Templates\Microsoft         Table 1.106. Disable InfoPath e-mail
Office InfoPath 2007\Disable items in user interface\Disable      forms in Outlook
InfoPath e-mail forms in Outlook (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft         Table 1.163. Information Rights
Office InfoPath 2007\Restricted Features\Information Rights       Management
Management (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Designer\Rest
rictedFeatures
(1) User Configuration\Administrative Templates\Microsoft         Table 1.79. Custom code
Office InfoPath 2007\Restricted Features\Custom code (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Designer\Rest
rictedFeatures
(1) User Configuration\Administrative Templates\Microsoft         Table 1.147. Email Forms Beaconing UI
Office InfoPath 2007\Miscellaneous\Email Forms Beaconing
UI (Never show UI | Always show UI | Show UI if XSN is in
Internet Zone) (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security



(1) User Configuration\Administrative Templates\Microsoft         Table 1.122. Disable user customization
Office 2007 system\Global Options\Customize\Disable user          of Quick Access Toolbar via UI
customization of Quick Access Toolbar via UI (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars


(1) User Configuration\Administrative Templates\Microsoft         Table 1.122. Disable user customization
Office 2007 system\Global Options\Customize\Disable user          of Quick Access Toolbar via UI
customization of Quick Access Toolbar via UI - Disallow in
Word (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars
(1) User Configuration\Administrative Templates\Microsoft       Table 1.122. Disable user customization
Office 2007 system\Global Options\Customize\Disable user        of Quick Access Toolbar via UI
customization of Quick Access Toolbar via UI - Disallow in
Excel (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars

(1) User Configuration\Administrative Templates\Microsoft       Table 1.122. Disable user customization
Office 2007 system\Global Options\Customize\Disable user        of Quick Access Toolbar via UI
customization of Quick Access Toolbar via UI - Disallow in
PowerPoint (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars


(1) User Configuration\Administrative Templates\Microsoft       Table 1.122. Disable user customization
Office 2007 system\Global Options\Customize\Disable user        of Quick Access Toolbar via UI
customization of Quick Access Toolbar via UI - Disallow in
Access (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars

(1) User Configuration\Administrative Templates\Microsoft       Table 1.122. Disable user customization
Office 2007 system\Global Options\Customize\Disable user        of Quick Access Toolbar via UI
customization of Quick Access Toolbar via UI - Disallow in
Outlook (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars

(1) User Configuration\Administrative Templates\Microsoft       Table 1.90. Disable all user
Office 2007 system\Global Options\Customize\Disable all user    customization of Quick Access Toolbar
customization of Quick Access Toolbar (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars


(1) User Configuration\Administrative Templates\Microsoft       Table 1.90. Disable all user
Office 2007 system\Global Options\Customize\Disable all user    customization of Quick Access Toolbar
customization of Quick Access Toolbar - Disallow in Word (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars


(1) User Configuration\Administrative Templates\Microsoft       Table 1.90. Disable all user
Office 2007 system\Global Options\Customize\Disable all user    customization of Quick Access Toolbar
customization of Quick Access Toolbar - Disallow in Excel (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars


(1) User Configuration\Administrative Templates\Microsoft       Table 1.90. Disable all user
Office 2007 system\Global Options\Customize\Disable all user    customization of Quick Access Toolbar
customization of Quick Access Toolbar - Disallow in
PowerPoint (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars
(1) User Configuration\Administrative Templates\Microsoft      Table 1.90. Disable all user
Office 2007 system\Global Options\Customize\Disable all user   customization of Quick Access Toolbar
customization of Quick Access Toolbar - Disallow in Access
(2) Software\Policies\Microsoft\Office\12.0\Common\Toolbars


(1) User Configuration\Administrative Templates\Microsoft      Table 1.90. Disable all user
Office 2007 system\Global Options\Customize\Disable all user   customization of Quick Access Toolbar
customization of Quick Access Toolbar - Disallow in Outlook
(2) Software\Policies\Microsoft\Office\12.0\Common\Toolbars


(1) User Configuration\Administrative Templates\Microsoft      Table 1.121. Disable UI extending from
Office 2007 system\Global Options\Customize\Disable UI         documents and templates
extending from documents and templates (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars


(1) User Configuration\Administrative Templates\Microsoft      Table 1.121. Disable UI extending from
Office 2007 system\Global Options\Customize\Disable UI         documents and templates
extending from documents and templates - Disallow in Word
(2) Software\Policies\Microsoft\Office\12.0\Common\Toolbars


(1) User Configuration\Administrative Templates\Microsoft      Table 1.121. Disable UI extending from
Office 2007 system\Global Options\Customize\Disable UI         documents and templates
extending from documents and templates - Disallow in Excel
(2) Software\Policies\Microsoft\Office\12.0\Common\Toolbars


(1) User Configuration\Administrative Templates\Microsoft      Table 1.121. Disable UI extending from
Office 2007 system\Global Options\Customize\Disable UI         documents and templates
extending from documents and templates - Disallow in
PowerPoint (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars

(1) User Configuration\Administrative Templates\Microsoft      Table 1.121. Disable UI extending from
Office 2007 system\Global Options\Customize\Disable UI         documents and templates
extending from documents and templates - Disallow in Access
(2) Software\Policies\Microsoft\Office\12.0\Common\Toolbars


(1) User Configuration\Administrative Templates\Microsoft      Table 1.121. Disable UI extending from
Office 2007 system\Global Options\Customize\Disable UI         documents and templates
extending from documents and templates - Disallow in
Outlook (2)
Software\Policies\Microsoft\Office\12.0\Common\Toolbars
(1) User Configuration\Administrative Templates\Microsoft        Table 1.194. Recognize smart tags in
Office 2007 system\Tools | AutoCorrect Options... (Excel,        Excel
Word, PowerPoint and Access)\Recognize smart tags in Excel
(2) Software\Policies\Microsoft\Office\12.0\Excel\Options


(1) User Configuration\Administrative Templates\Microsoft        Table 1.93. Disable Clip Art and Media
Office 2007 system\Tools | Options | General | Web               downloads from the client and from
Options...\Disable Clip Art and Media downloads from the         Office Online website
client and from Office Online website (2)
Software\Policies\Microsoft\Office\12.0\Common\Internet

(1) User Configuration\Administrative Templates\Microsoft        Table 1.117. Disable template
Office 2007 system\Tools | Options | General | Web               downloads from the client and from
Options...\Disable template downloads from the client and        Office Online website
from Office Online website (2)
Software\Policies\Microsoft\Office\12.0\Common\Internet

(1) User Configuration\Administrative Templates\Microsoft        Table 1.85. Disable access to updates,
Office 2007 system\Tools | Options | General | Web               add-ins, and patches on the Office
Options...\Disable access to updates, add-ins, and patches on    Online website
the Office Online website (2)
Software\Policies\Microsoft\Office\12.0\Common\Internet

(1) User Configuration\Administrative Templates\Microsoft        Table 1.188. Prevents users from
Office 2007 system\Tools | Options | General | Web               uploading document templates to the
Options...\Prevents users from uploading document templates      Office Online community
to the Office Online community. (2)
Software\Policies\Microsoft\Office\12.0\Common\Internet

(1) User Configuration\Administrative Templates\Microsoft        Table 1.119. Disable training practice
Office 2007 system\Tools | Options | General | Web               downloads from the Office Online
Options...\Disable training practice downloads from the Office   website
Online website (2)
Software\Policies\Microsoft\Office\12.0\Common\Internet

(1) User Configuration\Administrative Templates\Microsoft        Table 1.95. Disable customer-submitted
Office 2007 system\Tools | Options | General | Web               templates downloads from Office Online
Options...\Disable customer-submitted templates downloads
from Office Online (2)
Software\Policies\Microsoft\Office\12.0\Common\Internet

(1) User Configuration\Administrative Templates\Microsoft        Table 1.180. Open Office documents as
Office 2007 system\Tools | Options | General | Web               read/write while browsing
Options...\Files\Open Office documents as read/write while
browsing (2)
Software\Policies\Microsoft\Office\12.0\Common\Internet
(1) User Configuration\Administrative Templates\Microsoft       Table 1.195. Rely on VML for displaying
Office 2007 system\Tools | Options | General | Web              graphics in browsers
Options...\Browsers\Rely on VML for displaying graphics in
browsers (2)
Software\Policies\Microsoft\Office\12.0\Common\Internet

(1) User Configuration\Administrative Templates\Microsoft       Table 1.9. Allow PNG as an output
Office 2007 system\Tools | Options | General | Web              format
Options...\Browsers\Allow PNG as an output format (2)
Software\Policies\Microsoft\Office\12.0\Common\Internet

(1) User Configuration\Administrative Templates\Microsoft       Table 1.160. Improve Proofing Tools
Office 2007 system\Tools | Options | Spelling\Proofing Data
Collection\Improve Proofing Tools (2)
Software\Policies\Microsoft\Office\12.0\Common\PTWatson

(1) User Configuration\Administrative Templates\Classic
Administrative Templates\Microsoft Office 2007\Privacy \Trust
Center\Disable Opt-in Wizard on first run (2)
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\1          Table 1.110. Disable Opt-in Wizard on
2.0\Common\QMEnable                                             first run
(1) User Configuration\Administrative Templates\Microsoft
Office 2007 system\Help\Microsoft Office Online (2)
Software\Policies\Microsoft\Office\12.0\Common\Internet
(1) User Configuration\Administrative Templates\Microsoft
Office 2007 system\Security Settings\Disable Password
Caching (2)
Software\Policies\Microsoft\Office\12.0\Common\Security
(1) User Configuration\Administrative Templates\Microsoft       Table 1.88. Disable all Trust Bar
Office 2007 system\Security Settings\Disable all Trust Bar      notifications for security issues
notifications for security issues (2)
Software\Policies\Microsoft\Office\12.0\Common\TrustCenter

(1) User Configuration\Administrative Templates\Microsoft       Table 1.191. Protect document
Office 2007 system\Security Settings\Protect document           metadata for rights managed Office
metadata for rights managed Office Open XML Files (2)           Open XML Files
Software\Policies\Microsoft\Office\12.0\Common\Security

(1) User Configuration\Administrative Templates\Microsoft       Table 1.190. Protect document
Office 2007 system\Security Settings\Protect document           metadata for password protected files
metadata for password protected files. (2)
Software\Policies\Microsoft\Office\12.0\Common\Security

(1) User Configuration\Administrative Templates\Microsoft       Table 1.153. Encryption type for
Office 2007 system\Security Settings\Encryption type for        password protected Office Open XML
password protected Office Open XML files (2)                    files
Software\Policies\Microsoft\Office\12.0\Common\Security
(1) User Configuration\Administrative Templates\Microsoft       Table 1.152. Encryption type for
Office 2007 system\Security Settings\Encryption type for        password protected Office 97-2003 files
password protected Office 97-2003 files (2)
Software\Policies\Microsoft\Office\12.0\Common\Security

(1) User Configuration\Administrative Templates\Microsoft       Table 1.168. Load Controls in Forms3
Office 2007 system\Security Settings\Load Controls in Forms3
(1 | 2 | 3 | 4) (2) Software\Policies\Microsoft\VBA\Security

2007: (1) User Configuration\Administrative                     Table 1.24. Automation Security
Templates\Microsoft Office 2007 system\Security
Settings\Automation Security (Disable macros by default | Use
application macro security level | Macros enabled) (2)
Software\Policies\Microsoft\Office\Common\Security 2003: (1)
Computer Configuration\Administrative Templates\Microsoft
Office 2003\Security Settings\Automation Security (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Common\Securi
ty - AutomationSecurity

(1) User Configuration\Administrative Templates\Microsoft
Office 2007 system\Security Settings\Prevent Word and Excel
from loading managed code extensions (2)
Software\Policies\Microsoft\Office\Common\Smart Tag


(1) User Configuration\Administrative Templates\Microsoft       Table 1.103. Disable hyperlink warnings
Office 2007 system\Security Settings\Disable hyperlink
warnings (2)
Software\Policies\Microsoft\Office\12.0\Common\Security
(1) User Configuration\Administrative Templates\Microsoft       Table 1.111. Disable password to open
Office 2007 system\Security Settings\Disable password to        UI
open UI (2)
Software\Policies\Microsoft\Office\12.0\Common\Security
(1) User Configuration\Administrative Templates\Microsoft
Office 2007 system\Security Settings\Download Office
Controls (2)
Software\Policies\Microsoft\Office\12.0\Common\Internet
(1) User Configuration\Administrative Templates\Microsoft       Table 1.86. Disable All ActiveX
Office 2007 system\Security Settings\Disable All ActiveX (2)
Software\Policies\Microsoft\Office\Common\Security

(1) User Configuration\Administrative Templates\Microsoft       Table 1.8. Allow mix of policy and user
Office 2007 system\Security Settings\Trust Center\Allow mix     locations
of policy and user locations (2)
Software\Policies\Microsoft\Office\12.0\Common\Security\Trus
ted Locations
(1) User Configuration\Administrative Templates\Microsoft       Table 1.116. Disable Smart Document's
Office 2007 system\Smart Documents (Word, Excel)\Disable        use of manifests
Smart Document's use of manifests (2)
Software\Policies\Microsoft\Office\Common\Smart Tag
(1) User Configuration\Administrative Templates\Microsoft
Office 2007 system\Smart Documents (Word,
Excel)\Completely disable the Smart Documents feature in
Word and Excel (2)
Software\Policies\Microsoft\Office\Common\Smart Tag

(1) User Configuration\Administrative Templates\Microsoft            Table 1.107. Disable Internet Fax
Office 2007 system\Services\Fax\Disable Internet Fax feature         feature
(2)
Software\Policies\Microsoft\Office\12.0\Common\Services\Fax

(1) User Configuration\Administrative Templates\Microsoft            Table 1.187. Prevent users from
Office 2007 system\Manage Restricted Permissions\Prevent             changing permissions on rights
users from changing permissions on rights managed content            managed content
(2) Software\Policies\Microsoft\Office\12.0\Common\DRM


(1) User Configuration\Administrative Templates\Microsoft            Table 1.13. Allow users with earlier
Office 2007 system\Manage Restricted Permissions\Allow               versions of Office to read with
users with earlier versions of Office to read with browsers... (2)   browsers…
Software\Policies\Microsoft\Office\12.0\Common\DRM


(1) User Configuration\Administrative Templates\Microsoft            Table 1.15. Always require users to
Office 2007 system\Manage Restricted Permissions\Always              connect to verify permission
require users to connect to verify permission (2)
Software\Policies\Microsoft\Office\12.0\Common\DRM

(1) User Configuration\Administrative Templates\Microsoft            Table 1.14. Always expand groups in
Office 2007 system\Manage Restricted Permissions\Always              Office when restricting permission for
expand groups in Office when restricting permission for              documents
documents (2)
Software\Policies\Microsoft\Office\12.0\Common\DRM\AutoEx
pandDls
(1) User Configuration\Administrative Templates\Microsoft            Table 1.177. Never allow users to
Office 2007 system\Manage Restricted Permissions\Never               specify groups when restricting
allow users to specify groups when restricting permission for        permission for documents
documents (2)
Software\Policies\Microsoft\Office\12.0\Common\DRM

(1) User Configuration\Administrative Templates\Microsoft            Table 1.108. Disable Microsoft Passport
Office 2007 system\Manage Restricted Permissions\Disable             service for content with restricted
Microsoft Passport service for content with restricted               permission
permission (2)
Software\Policies\Microsoft\Office\12.0\Common\DRM

(1) User Configuration\Administrative Templates\Microsoft
Office 2007 system\Manage Restricted Permissions\Do not
allow users to upgrade Information Rights Management
configuration (2)
Software\Policies\Microsoft\Office\12.0\Common\DRM
(1) User Configuration\Administrative Templates\Microsoft      Table 1.166. Key Usage Filtering
Office 2007 system\Signing\Key Usage Filtering (2)
Software\Policies\Microsoft\Office\12.0\Common\General
(1) User Configuration\Administrative Templates\Microsoft      Table 1.146. EKU filtering
Office 2007 system\Signing\EKU filtering (2)
Software\Policies\Microsoft\Office\12.0\Common\Signatures

(1) User Configuration\Administrative Templates\Microsoft      Table 1.167. Legacy format signatures
Office 2007 system\Signing\Legacy format signatures (2)
Software\Policies\Microsoft\Office\12.0\Common\Signatures

(1) User Configuration\Administrative Templates\Microsoft      Table 1.223. Suppress Office Signing
Office 2007 system\Signing\Suppress Office Signing Providers   Providers
(Enable Western and East Asian | Suppress default Western |
Suppress default East Asian | Suppress both Western and
East Asian) (2)
Software\Policies\Microsoft\Office\12.0\Common\Signatures




(1) User Configuration\Administrative Templates\Microsoft      Table 1.222. Suppress external
Office 2007 system\Signing\Suppress external signature         signature services menu item
services menu item (2)
Software\Policies\Microsoft\Office\12.0\Common\Signatures

(1) User Configuration\Administrative Templates\Microsoft      Table 1.92. Disable Check For Solutions
Office 2007 system\Office Diagnostics\Disable Check For
Solutions (2)
Software\Policies\Microsoft\Office\Common\OffDiag
(1) User Configuration\Administrative Templates\Microsoft      Table 1.105. Disable inclusion of
Office 2007 system\Microsoft Save As PDF and XPS add-          document properties in PDF and XPS
ins\Disable inclusion of document properties in PDF and XPS    output
output (2)
Software\Policies\Microsoft\Office\12.0\Common\FixedFormat

(1) User Configuration\Administrative Templates\Microsoft      Table 1.96. Disable Document
Office 2007 system\Document Information Panel\Disable          Information Panel
Document Information Panel (2)
Software\Policies\Microsoft\Office\12.0\Common\DocumentInf
ormationPanel
(1) User Configuration\Administrative Templates\Microsoft      Table 1.144. Document Information
Office 2007 system\Document Information Panel\Document         Panel Beaconing UI
Information Panel Beaconing UI (Never show UI | Always
show UI | Show UI if XSN is in Internet Zone) (2)
Software\Policies\Microsoft\Office\12.0\Common\DocumentInf
ormationPanel
(1) User Configuration\Administrative Templates\Microsoft         Table 1.118. Disable the Office client
Office 2007 system\Server Settings\Disable the Office client      from polling the Office server for
from polling the Office server for published links (2)            published links
Software\Policies\Microsoft\Office\12.0\Common\Portal

(1) User Configuration\Administrative Templates\Microsoft         Table 1.44. Block opening of pre-
Office 2007 system\Office 2007 Converters\Block opening of        release versions of file formats new to
pre-release versions of file formats new to Word 2007 through     Word 2007 through the Compatibility
the Compatibility Pack for the 2007 Office system and Word        Pack for the 2007 Office system and
2007 Open XML/Word 97-2003 Format Converter (2)                   Word 2007 Open XML/Word 97-2003
Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpe     Format Converter
nBlock




(1) User Configuration\Administrative Templates\Microsoft         Table 1.40. Block opening of pre-
Office 2007 system\Office 2007 Converters\Block opening of        release versions of file formats new to
pre-release versions of file formats new to Excel 2007 through    Excel 2007 through the Compatibility
the Compatibility Pack for the 2007 Office system and Excel       Pack for the 2007 Office system and
2007 Converter (2)                                                Excel 2007 Converter
Software\Policies\Microsoft\Office\12.0\Excel\Security\FileOpe
nBlock


(1) User Configuration\Administrative Templates\Microsoft         Table 1.42. Block opening of pre-
Office 2007 system\Office 2007 Converters\Block opening of        release versions of file formats new to
pre-release versions of file formats new to PowerPoint 2007       PowerPoint 2007 through the
through the Compatibility Pack for the 2007 Office system and     Compatibility Pack for the 2007 Office
PowerPoint 2007 Converter (2)                                     system and PowerPoint 2007 Converter
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Fil
eOpenBlock


(1) User Configuration\Administrative Templates\Microsoft         Table 1.78. Control blogging
Office 2007 system\Miscellaneous\Control Blogging (Enabled |
Only SharePoint blogs allowed | All blogging disabled) (2)
Software\Policies\Microsoft\Office\12.0\Common\Blog


(1) User Configuration\Administrative Templates\Microsoft
Office 2007 system\Miscellaneous\Enable Smart Resume (2)
Software\Policies\Microsoft\Office\12.0\Common\Restore
Workspace

(1) User Configuration\Administrative Templates\Microsoft
Office 2007 system\Miscellaneous\Do not upload media files
(2) Software\Policies\Microsoft\Office\12.0\Common\Internet
(1) User Configuration\Administrative Templates\Microsoft          Table 1.104. Disable hyperlinks to web
Office 2007 system\Miscellaneous\Disable hyperlinks to web         templates from the client and from
templates in File | New and task panes (2)                         Office Online website
Software\Policies\Microsoft\Office\12.0\Common\Internet

(1) User Configuration\Administrative Templates\Microsoft
Office 2007 system\Miscellaneous\Prevent access to Web-
based file storage (2)
Software\Policies\Microsoft\Office\12.0\Common\WebServices

(1) User Configuration\Administrative Templates\Microsoft          Table 1.128. Do not allow attachment
Office Outlook 2007\Tools | Options...\Preferences\E-mail          previewing in Outlook
Options\Do not allow attachment previewing in Outlook (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Preferences

(1) User Configuration\Administrative Templates\Microsoft          Table 1.192. Read e-mail as plain text
Office Outlook 2007\Tools | Options...\Preferences\E-mail
Options\Read e-mail as plain text (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft          Table 1.193. Read signed e-mail as
Office Outlook 2007\Tools | Options...\Preferences\E-mail          plain text
Options\Read signed e-mail as plain text (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft          Table 1.185. Prevent publishing to
Office Outlook 2007\Tools | Options...\Preferences\Calendar        Office Online
Options\Microsoft Office Online Sharing ServicePrevent
publishing to Office Online (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\PubC
al

(1) User Configuration\Administrative Templates\Microsoft          Table 1.184. Prevent publishing to a
Office Outlook 2007\Tools | Options...\Preferences\Calendar        DAV server
Options\Microsoft Office Online Sharing ServicePrevent
publishing to a DAV server (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\PubC
al

(1) User Configuration\Administrative Templates\Microsoft
Office Outlook 2007\Tools | Options...\Preferences\Calendar
Options\Microsoft Office Online Sharing ServiceRestrict level
of calendar details users can publish (All options are available
| Disables 'Full details' | Disables 'Full details' and 'Limited
details') (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\PubC
al
                                                                   Table 1.202. Restrict level of calendar
                                                                   details users can publish
(1) User Configuration\Administrative Templates\Microsoft      Table 1.1. Access to published
Office Outlook 2007\Tools | Options...\Preferences\Calendar    calendars
Options\Microsoft Office Online Sharing ServiceAccess to
published calendars (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\PubC
al

(1) User Configuration\Administrative Templates\Microsoft      Table 1.203. Restrict upload method
Office Outlook 2007\Tools | Options...\Preferences\Calendar
Options\Microsoft Office Online Sharing ServiceRestrict
upload method (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\PubC
al

(1) User Configuration\Administrative Templates\Microsoft      Table 1.158. Hide Junk Mail UI
Office Outlook 2007\Tools | Options...\Preferences\Junk E-
mail\Hide Junk Mail UI (2)
Software\Policies\Microsoft\Office\12.0\Outlook

(1) User Configuration\Administrative Templates\Microsoft      Table 1.165. Junk E-mail protection
Office Outlook 2007\Tools | Options...\Preferences\Junk E-     level
mail\Junk E-mail protection level (No Protection, Low, High,
Trusted Lists Only) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail


(1) User Configuration\Administrative Templates\Microsoft      Table 1.226. Trust E-mail from Contacts
Office Outlook 2007\Tools | Options...\Preferences\Junk E-
mail\Trust E-mail from Contacts (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft      Table 1.4. Add e-mail recipients to users' Safe Senders List
Office Outlook 2007\Tools | Options...\Preferences\Junk E-
mail\Add e-mail recipients to users' Safe Senders Lists (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail


(1) User Configuration\Administrative Templates\Microsoft      Table 1.84. Dial-up options
Office Outlook 2007\Tools | Options...\Mail Setup\Dial-up
options (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft      Table 1.84. Dial-up options
Office Outlook 2007\Tools | Options...\Mail Setup\Dial-up
options - Warn before switching dial-up connection (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail
(1) User Configuration\Administrative Templates\Microsoft       Table 1.84. Dial-up options
Office Outlook 2007\Tools | Options...\Mail Setup\Dial-up
options - Hang up when finished sending, receiving, or
updating (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft       Table 1.84. Dial-up options
Office Outlook 2007\Tools | Options...\Mail Setup\Dial-up
options - Automatically dial during a background Send/Receive
(2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail


(1) User Configuration\Administrative Templates\Microsoft       Table 1.129. Do not allow creating,
Office Outlook 2007\Tools | Options...\Mail Format\Do not       replying, or forwarding signatures for e-
allow creating, replying, or forwarding signatures for e-mail   mail messages
messages (2)
Software\Policies\Microsoft\Office\12.0\Common\MailSettings


(1) User Configuration\Administrative Templates\Microsoft
Office Outlook 2007\Tools | Options...\Mail Format\Internet
Formatting\Send copy of pictures with HTML messages
instead of reference to Internet location (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail


(1) User Configuration\Administrative Templates\Microsoft       Table 1.181. Outlook Rich Text options
Office Outlook 2007\Tools | Options...\Mail Format\Internet
Formatting\Outlook Rich Text options (Convert to HTML |
Convert to Plain Text format | Send Using Outlook Rich Text
format) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail


(1) User Configuration\Administrative Templates\Microsoft       Table 1.183. Plain text options
Office Outlook 2007\Tools | Options...\Mail Format\Internet
Formatting\Plain text options (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft       Table 1.183. Plain text options
Office Outlook 2007\Tools | Options...\Mail Format\Internet
Formatting\Plain text options - Encode attachments in
UUENCODE format when sending a plain text message (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail
(1) User Configuration\Administrative Templates\Microsoft          Table 1.217. Set message format
Office Outlook 2007\Tools | Options...\Mail Format\Internet
Formatting\Message FormatSet message format (HTML | Rich
Text | Plain Text) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft          Table 1.171. Make Outlook the default
Office Outlook 2007\Tools | Options...\Other\Make Outlook the      program for E-mail, Contacts, and
default program for E-mail, Contacts, and Calendar (2)             Calendar
software\policies\microsoft\office\12.0\outlook\options\general


(1) User Configuration\Administrative Templates\Microsoft          Table 1.130. Do not allow folders in non-
Office Outlook 2007\Tools | Options...\Other\Advanced\Do not       default stores to be set as folder home
allow folders in non-default stores to be set as folder home       pages
pages (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft          Table 1.233. Use Unicode format when
Office Outlook 2007\Tools | Options...\Other\Advanced\Use          dragging e-mail message to file system
Unicode format when dragging e-mail message to file system
(2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Gener
al
(1) User Configuration\Administrative Templates\Microsoft          Table 1.132. Do not allow Outlook
Office Outlook 2007\Tools | Options...\Other\Advanced\Do not       object model scripts to run for shared
allow Outlook object model scripts to run for shared folders (2)   folders
Software\Policies\Microsoft\Office\12.0\Outlook\Security


(1) User Configuration\Administrative Templates\Microsoft          Table 1.131. Do not allow Outlook
Office Outlook 2007\Tools | Options...\Other\Advanced\Do not       object model scripts to run for public
allow Outlook object model scripts to run for public folders (2)   folders
Software\Policies\Microsoft\Office\12.0\Outlook\Security


(1) User Configuration\Administrative Templates\Microsoft          Table 1.216. Set maximum level of
Office Outlook 2007\Tools | Options...\Other\Person                online status on a person name
Names\Set maximum level of online status on a person name
(Do not allow | Allow everywhere except To and CC field |
Allow everywhere) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\IM
(1) User Configuration\Administrative Templates\Microsoft       Table 1.126. Display online status on a
Office Outlook 2007\Tools | Options...\Other\Person             person name
Names\Display online status on a person name (Never |
Everywhere except To and CC field | Everywhere) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\IM



(1) User Configuration\Administrative Templates\Microsoft       Table 1.227. Turn off Enable the Person
Office Outlook 2007\Tools | Options...\Other\Person             Names Smart Tag option
Names\Turn off Enable the Person Names Smart Tag option
(2) Software\Policies\Microsoft\Office\12.0\Outlook\IM


(1) User Configuration\Administrative Templates\Microsoft       Table 1.182. Outlook Security Mode
Office Outlook 2007\Security\Security Form Settings\Outlook
Security Mode (Outlook Default Security | Use Security Form
from 'Outlook Security Settings' Public Folder | Use Security
Form from 'Outlook 10 Security Settings' Public Folder | Use
Outlook Security Group Policy) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security




(1) User Configuration\Administrative Templates\Microsoft       Table 1.125. Display Level 1
Office Outlook 2007\Security\Security Form                      attachments
Settings\Attachment Security\Display Level 1 attachments (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft       Table 1.12. Allow users to demote
Office Outlook 2007\Security\Security Form                      attachments to Level 2
Settings\Attachment Security\Allow users to demote
attachments to Level 2 (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft       Table 1.140. Do not prompt about Level
Office Outlook 2007\Security\Security Form                      1 attachments when sending an item
Settings\Attachment Security\Do not prompt about Level 1
attachments when sending an item (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft       Table 1.139. Do not prompt about Level
Office Outlook 2007\Security\Security Form                      1 attachments when closing an item
Settings\Attachment Security\Do not prompt about Level 1
attachments when closing an item (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft
Office Outlook 2007\Security\Security Form
Settings\Attachment Security\Allow in-place activation of
embedded OLE objects (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft
Office Outlook 2007\Security\Security Form
Settings\Attachment Security\Display OLE package objects (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft      Table 1.5. Add file extensions to block as Level 1
Office Outlook 2007\Security\Security Form
Settings\Attachment Security\Add file extensions to block as
Level 1 (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft      Table 1.196. Remove file extensions
Office Outlook 2007\Security\Security Form                     blocked as Level 1
Settings\Attachment Security\Remove file extensions blocked
as Level 1 (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft      Table 1.6. Add file extensions to block as Level 2
Office Outlook 2007\Security\Security Form
Settings\Attachment Security\Add file extensions to block as
Level 2 (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft      Table 1.197. Remove file extensions
Office Outlook 2007\Security\Security Form                     blocked as Level 2
Settings\Attachment Security\Remove file extensions blocked
as Level 2 (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft      Table 1.10. Allow scripts in one-off
Office Outlook 2007\Security\Security Form Settings\Custom     Outlook forms
Form Security\Allow scripts in one-off Outlook forms (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft      Table 1.218. Set Outlook object model
Office Outlook 2007\Security\Security Form Settings\Custom     Custom Actions execution prompt
Form Security\Set Outlook object model Custom Actions
execution prompt (Prompt User | Automatically Approve |
Automatically Deny | Prompt user based on computer security)
(2) Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft      Table 1.215. Set control ItemProperty
Office Outlook 2007\Security\Security Form Settings\Custom     prompt
Form Security\Set control ItemProperty prompt (Prompt User |
Automatically Approve | Automatically Deny | Prompt user
based on computer security) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security



(1) User Configuration\Administrative Templates\Microsoft      Table 1.71. Configure Outlook object
Office Outlook 2007\Security\Security Form                     model prompt when sending mail
Settings\Programmatic Security\Configure Outlook object
model prompt when sending mail (Prompt User | Automatically
Approve | Automatically Deny | Prompt user based on
computer security) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security




(1) User Configuration\Administrative Templates\Microsoft      Table 1.65. Configure Outlook object
Office Outlook 2007\Security\Security Form                     model prompt when accessing an
Settings\Programmatic Security\Configure Outlook object        address book
model prompt when accessing an address book (Prompt User
| Automatically Approve | Automatically Deny | Prompt user
based on computer security) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security




(1) User Configuration\Administrative Templates\Microsoft      Table 1.69. Configure Outlook object
Office Outlook 2007\Security\Security Form                     model prompt when reading address
Settings\Programmatic Security\Configure Outlook object        information
model prompt when reading address information (Prompt User
| Automatically Approve | Automatically Deny | Prompt user
based on computer security) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft      Table 1.70. Configure Outlook object
Office Outlook 2007\Security\Security Form                     model prompt when responding to
Settings\Programmatic Security\Configure Outlook object        meeting and task requests
model prompt when responding to meeting and task requests
(Prompt User | Automatically Approve | Automatically Deny |
Prompt user based on computer security) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security




(1) User Configuration\Administrative Templates\Microsoft      Table 1.68. Configure Outlook object
Office Outlook 2007\Security\Security Form                     model prompt when executing Save As
Settings\Programmatic Security\Configure Outlook object
model prompt when executing Save As (Prompt User |
Automatically Approve | Automatically Deny | Prompt user
based on computer security) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security




(1) User Configuration\Administrative Templates\Microsoft      Table 1.67. Configure Outlook object
Office Outlook 2007\Security\Security Form                     model prompt When accessing the
Settings\Programmatic Security\Configure Outlook object        Formula property of a UserProperty
model prompt When accessing the Formula property of a          object
UserProperty object (Prompt User | Automatically Approve |
Automatically Deny | Prompt user based on computer security)
(2) Software\Policies\Microsoft\Office\12.0\Outlook\Security




(1) User Configuration\Administrative Templates\Microsoft      Table 1.66. Configure Outlook object
Office Outlook 2007\Security\Security Form                     model prompt when accessing address
Settings\Programmatic Security\Configure Outlook object        information via UserProperties.Find
model prompt when accessing address information via
UserProperties.Find (Prompt User | Automatically Approve |
Automatically Deny | Prompt user based on computer security)
(2) Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft             Table 1.201. Required Certificate
Office Outlook 2007\Security\Cryptography\Required                    Authority
Certificate Authority (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft             Table 1.207. S/MIME interoperability
Office Outlook 2007\Security\Cryptography\S/MIME                      with external clients:
interoperability with external clients: (Handle internally | Handle
externally | Handle if possible) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security



(1) User Configuration\Administrative Templates\Microsoft
Office Outlook 2007\Security\Cryptography\Always use Rich
Text formatting in S/MIME messages (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security


(1) User Configuration\Administrative Templates\Microsoft             Table 1.208. S/MIME password settings
Office Outlook 2007\Security\Cryptography\S/MIME password
settings (2)
Software\Policies\Microsoft\Cryptography\Defaults\Provider\Mi
crosoft Exchange Cryptographic Provider v1.0
(1) User Configuration\Administrative Templates\Microsoft             Table 1.208. S/MIME password settings
Office Outlook 2007\Security\Cryptography\S/MIME password
settings - Default S/MIME password time (minutes): (0 -
2147483647) (2)
Software\Policies\Microsoft\Cryptography\Defaults\Provider\Mi
crosoft Exchange Cryptographic Provider v1.0

(1) User Configuration\Administrative Templates\Microsoft             Table 1.208. S/MIME password settings
Office Outlook 2007\Security\Cryptography\S/MIME password
settings - Maximum S/MIME password time (minutes): (0 -
2147483647) (2)
Software\Policies\Microsoft\Cryptography\Defaults\Provider\Mi
crosoft Exchange Cryptographic Provider v1.0


(1) User Configuration\Administrative Templates\Microsoft             Table 1.172. Message Formats
Office Outlook 2007\Security\Cryptography\Message Formats
(2) Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft         Table 1.172. Message Formats
Office Outlook 2007\Security\Cryptography\Message Formats -
Support the following message formats: (S/MIME | Exchange |
Fortezza | S/MIME and Exchange | S/MIME and Fortezza |
Exchange and Fortezza | S/MIME, Exchange, and Fortezza)
(2) Software\Policies\Microsoft\Office\12.0\Outlook\Security




2007: (1) User Configuration\Administrative                       Table 1.142. Do not provide Continue
Templates\Microsoft Office Outlook                                option on Encryption warning dialog
2007\Security\Cryptography\Do not provide Continue option on      boxes
Encryption warning dialog boxes (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security 2003:
(1) User Configuration\Administrative Templates\Microsoft
Office Outlook
2003\Tools\Options\Security\Cryptography\Disable Continue
button on all Encryption warning dialogs (2)
HKCU\Software\Policies\Microsoft\office\11.0\outlook\Security -
DisableContinue
(1) User Configuration\Administrative Templates\Microsoft         Table 1.205. Run in FIPS compliant
Office Outlook 2007\Security\Cryptography\Run in FIPS             mode
compliant mode (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

2007: (1) User Configuration\Administrative                       Table 1.151. Encrypt all e-mail
Templates\Microsoft Office Outlook                                messages
2007\Security\Cryptography\Encrypt all e-mail messages (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security 2003:
(1) User Configuration\Administrative Templates\Microsoft
Office Outlook
2003\Tools\Options\Security\Cryptography\Encrypt all e-mail
messages (2)
HKCU\Software\Policies\Microsoft\Office\11.0\Outlook\Securit
y - AlwaysEncrypt

(1) User Configuration\Administrative Templates\Microsoft         Table 1.219. Sign all e-mail messages
Office Outlook 2007\Security\Cryptography\Sign all e-mail
messages (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft         Table 1.232. URL for S/MIME
Office Outlook 2007\Security\Cryptography\URL for S/MIME          certificates
certificates (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft            Table 1.154. Ensure all S/MIME signed
Office Outlook 2007\Security\Cryptography\Ensure all S/MIME          messages have a label
signed messages have a label (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft            Table 1.209. S/MIME receipt requests
Office Outlook 2007\Security\Cryptography\S/MIME receipt
requests (Open message if receipt can't be sent | Don't open
message if receipt can't be sent | Always prompt before
sending receipt | Never send S/MIME ) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security




(1) User Configuration\Administrative Templates\Microsoft            Table 1.156. Fortezza certificate policies
Office Outlook 2007\Security\Cryptography\Fortezza certificate
policies (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft            Table 1.199. Require SuiteB algorithms
Office Outlook 2007\Security\Cryptography\Require SuiteB             for S/MIME operations
algorithms for S/MIME operations (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security


(1) User Configuration\Administrative Templates\Microsoft            Table 1.174. Missing CRLs
Office Outlook 2007\Security\Cryptography\Signature Status
dialog box\Missing CRLs (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft            Table 1.174. Missing CRLs
Office Outlook 2007\Security\Cryptography\Signature Status
dialog box\Missing CRLs - Indicate a missing CRL as a(n):
(warning | error) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft            Table 1.175. Missing root certificates
Office Outlook 2007\Security\Cryptography\Signature Status
dialog box\Missing root certificates (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft            Table 1.175. Missing root certificates
Office Outlook 2007\Security\Cryptography\Signature Status
dialog box\Missing root certificates - Indicate a missing root
certificate as a(n): (neither error nor warning | warning | error)
(2) Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft       Table 1.189. Promote Level 2 errors as
Office Outlook 2007\Security\Cryptography\Signature Status      errors, not warnings
dialog box\Promote Level 2 errors as errors, not warnings (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft       Table 1.18. Attachment Secure
Office Outlook 2007\Security\Cryptography\Signature Status      Temporary Folder
dialog box\Attachment Secure Temporary Folder (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security

(1) User Configuration\Administrative Templates\Microsoft       Table 1.127. Display pictures and
Office Outlook 2007\Security\Automatic Picture Download         external content in HTML e-mail
Settings\Display pictures and external content in HTML e-mail
(2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft       Table 1.22. Automatically download
Office Outlook 2007\Security\Automatic Picture Download         content for e-mail from people in Safe
Settings\Automatically download content for e-mail from         Senders and Safe Recipients Lists
people in Safe Senders and Safe Recipients Lists (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail



(1) User Configuration\Administrative Templates\Microsoft       Table 1.138. Do not permit download of
Office Outlook 2007\Security\Automatic Picture Download         content from safe zones
Settings\Do not permit download of content from safe zones
(2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft       Table 1.63. Block Trusted Zones
Office Outlook 2007\Security\Automatic Picture Download
Settings\Block Trusted Zones (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft       Table 1.161. Include Internet in Safe
Office Outlook 2007\Security\Automatic Picture Download         Zones for Automatic Picture Download
Settings\Include Internet in Safe Zones for Automatic Picture
Download (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft       Table 1.162. Include Intranet in Safe
Office Outlook 2007\Security\Automatic Picture Download         Zones for Automatic Picture Download
Settings\Include Intranet in Safe Zones for Automatic Picture
Download (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail
(1) User Configuration\Administrative Templates\Microsoft        Table 1.213. Security setting for macros
Office Outlook 2007\Security\Trust Center\Security setting for
macros (Always warn | Never warn, disable all | Warn for
signed, disable unsigned | No security check) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security



(1) User Configuration\Administrative Templates\Microsoft        Table 1.149. Enable links in e-mail
Office Outlook 2007\Security\Trust Center\Enable links in e-     messages
mail messages (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail

(1) User Configuration\Administrative Templates\Microsoft        Table 1.16. Apply macro security
Office Outlook 2007\Security\Trust Center\Apply macro            settings to macros, add-ins, and
security settings to macros, add-ins, and SmartTags (2)          SmartTags
Software\Policies\Microsoft\Office\12.0\Outlook\Security



(1) User Configuration\Administrative Templates\Microsoft        Table 1.20. Automatically configure
Office Outlook 2007\Tools | Account                              profile based on Active Directory
Settings\Exchange\Automatically configure profile based on       Primary SMTP address
Active Directory Primary SMTP address (2)
Software\Policies\Microsoft\Office\12.0\Outlook\AutoDiscover


(1) User Configuration\Administrative Templates\Microsoft        Table 1.133. Do not allow users to
Office Outlook 2007\Tools | Account Settings\Exchange\Do         change permissions on folders
not allow users to change permissions on folders (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Folder
s

(1) User Configuration\Administrative Templates\Microsoft        Table 1.150. Enable RPC encryption
Office Outlook 2007\Tools | Account
Settings\Exchange\Enable RPC encryption (2)
Software\Policies\Microsoft\Office\12.0\Outlook\RPC

(1) User Configuration\Administrative Templates\Microsoft        Table 1.19. Authentication with
Office Outlook 2007\Tools | Account                              Exchange Server
Settings\Exchange\Authentication with Exchange Server
(Kerberos/NTLM Password Authentication | Kerberos
Password Authentication | NTLM Password Authentication) (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Security
(1) User Configuration\Administrative Templates\Microsoft          Table 1.224. Synchronize Outlook RSS
Office Outlook 2007\Tools | Account Settings\RSS                   Feeds with Common Feed List
Feeds\Synchronize Outlook RSS Feeds with Common Feed
List (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\RSS

(1) User Configuration\Administrative Templates\Microsoft          Table 1.228. Turn off RSS feature
Office Outlook 2007\Tools | Account Settings\RSS Feeds\Turn
off RSS feature (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\RSS

(1) User Configuration\Administrative Templates\Microsoft
Office Outlook 2007\Tools | Account Settings\RSS
Feeds\Automatically download enclosures (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\RSS

(1) User Configuration\Administrative Templates\Microsoft          Table 1.145. Download full text of
Office Outlook 2007\Tools | Account Settings\RSS                   articles as HTML attachments
Feeds\Download full text of articles as HTML attachments (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\RSS


(1) User Configuration\Administrative Templates\Microsoft          Table 1.21. Automatically download
Office Outlook 2007\Tools | Account Settings\Internet              attachments
Calendars\Automatically download attachments (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\WebC
al

(1) User Configuration\Administrative Templates\Microsoft          Table 1.137. Do not include Internet
Office Outlook 2007\Tools | Account Settings\Internet              Calendar integration in Outlook
Calendars\Do not include Internet Calendar integration in
Outlook (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\WebC
al
(1) User Configuration\Administrative Templates\Microsoft          Table 1.123. Disable user entries to
Office Outlook 2007\Meeting Workspace\Disable user entries         server list
to server list (Publish default, allow others | Publish default,
disallow others) (2)
Software\Policies\Microsoft\Office\12.0\Meetings\Profile


(1) User Configuration\Administrative Templates\Microsoft          Table 1.136. Do not expand distribution
Office Outlook 2007\Miscellaneous\Do not expand distribution       lists
lists (2)
Software\Policies\Microsoft\Office\12.0\Outlook\Options\Mail
(1) User Configuration\Administrative Templates\Microsoft        Table 1.212. Save files in this format
Office PowerPoint 2007\PowerPoint Options\Save\Save files
in this format (PowerPoint Presentation (*.pptx) | PowerPoint
Macro-Enabled Presentation (*.pptm) | PowerPoint 97-2003
Presentation (*.ppt)) (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Options




(1) User Configuration\Administrative Templates\Microsoft
Office PowerPoint 2007\PowerPoint
Options\Advanced\Number of documents in the Recent
Documents list (0 - 50) (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\File MRU

(1) User Configuration\Administrative Templates\Microsoft        Table 1.82. Determine whether to force
Office PowerPoint 2007\PowerPoint                                encrypted macros to be scanned in
Options\Security\Determine whether to force encrypted            Microsoft PowerPoint Open XML
macros to be scanned in Microsoft PowerPoint Open XML            presentations
presentations (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security


(1) User Configuration\Administrative Templates\Microsoft        Table 1.206. Run Programs
Office PowerPoint 2007\PowerPoint Options\Security\Run
Programs (disable (don't run any programs) | enable (prompt
user before running) | enable all (run without prompting)) (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security




(1) User Configuration\Administrative Templates\Microsoft        Table 1.170. Make hidden markup
Office PowerPoint 2007\PowerPoint Options\Security\Make          visible
hidden markup visible (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security

(1) User Configuration\Administrative Templates\Microsoft        Table 1.229. Unblock automatic
Office PowerPoint 2007\PowerPoint Options\Security\Unblock       download of linked images
automatic download of linked images (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security


(1) User Configuration\Administrative Templates\Microsoft        Table 1.87. Disable all application add-
Office PowerPoint 2007\PowerPoint Options\Security\Trust         ins
Center\Disable all application add-ins (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security
(1) User Configuration\Administrative Templates\Microsoft        Table 1.200. Require that application
Office PowerPoint 2007\PowerPoint Options\Security\Trust         add-ins are signed by Trusted Publisher
Center\Require that application add-ins are signed by Trusted
Publisher (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security

(1) User Configuration\Administrative Templates\Microsoft        Table 1.120. Disable Trust Bar
Office PowerPoint 2007\PowerPoint Options\Security\Trust         Notification for unsigned application add-
Center\Disable Trust Bar Notification for unsigned application   ins
add-ins (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security

(1) User Configuration\Administrative Templates\Microsoft        Table 1.11. Allow Trusted Locations not
Office PowerPoint 2007\PowerPoint Options\Security\Trust         on the computer
Center\Trusted LocationsAllow Trusted Locations not on the
computer (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Tr
usted Locations
(1) User Configuration\Administrative Templates\Microsoft        Table 1.89. Disable all trusted locations
Office PowerPoint 2007\PowerPoint Options\Security\Trust
Center\Trusted LocationsDisable all trusted locations (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Tr
usted Locations

(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office PowerPoint 2007\Disable items in user
interface\Predefined\Disable commands (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledC
mdBarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office PowerPoint 2007\Disable items in user
interface\Predefined\Disable commands - Office Button |
PowerPoint Options | Customize | All Commands | Web Page
Preview (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledC
mdBarItemsCheckBoxes

(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office PowerPoint 2007\Disable items in user
interface\Predefined\Disable commands - Office Button | Send
| Email (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledC
mdBarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office PowerPoint 2007\Disable items in user
interface\Predefined\Disable commands - Insert | Links |
Hyperlink (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledC
mdBarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office PowerPoint 2007\Disable items in user
interface\Predefined\Disable commands - Review | Proofing |
Language (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledC
mdBarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office PowerPoint 2007\Disable items in user
interface\Predefined\Disable commands - View | Macros |
Macros (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledC
mdBarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office PowerPoint 2007\Disable items in user
interface\Predefined\Disable commands - Developer | Code |
Macros (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledC
mdBarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office PowerPoint 2007\Disable items in user
interface\Predefined\Disable commands - Developer | Code |
Macro Security (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledC
mdBarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office PowerPoint 2007\Disable items in user
interface\Predefined\Disable commands - Developer | Code |
Visual Basic (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledC
mdBarItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office PowerPoint 2007\Disable items in user
interface\Predefined\Disable commands - Office Button |
PowerPoint Options | Customize | All Commands | Document
Location (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledC
mdBarItemsCheckBoxes

(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands, Table
Office PowerPoint 2007\Disable items in user                     1.114. Disable shortcut keys
interface\Predefined\Disable commands - Disable shortcut
keys (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledS
hortcutKeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands, Table
Office PowerPoint 2007\Disable items in user                     1.114. Disable shortcut keys
interface\Predefined\Disable commands - Ctrl+K (Insert | Links
| Hyperlink) (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledS
hortcutKeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft         Table 1.94. Disable commands, Table
Office PowerPoint 2007\Disable items in user                      1.114. Disable shortcut keys
interface\Predefined\Disable commands - Alt+F8 (Developer |
Code | Macros) (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledS
hortcutKeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft         Table 1.94. Disable commands, Table
Office PowerPoint 2007\Disable items in user                      1.114. Disable shortcut keys
interface\Predefined\Disable commands - Alt+F11 (Developer
| Code | Visual Basic) (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\DisabledS
hortcutKeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft         Table 1.41. Block opening of pre-
Office PowerPoint 2007\Block file formats\Open\Block opening      release versions of file formats new to
of pre-release versions of file formats new to PowerPoint 2007    PowerPoint 2007
(2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Fil
eOpenBlock

(1) User Configuration\Administrative Templates\Microsoft         Table 1.38. Block opening of Open XML
Office PowerPoint 2007\Block file formats\Open\Block opening      file types
of Open Xml files types (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Fil
eOpenBlock
(1) User Configuration\Administrative Templates\Microsoft         Table 1.30. Block opening of Binary file
Office PowerPoint 2007\Block file formats\Open\Block opening      types
of Binary file types (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Fil
eOpenBlock
(1) User Configuration\Administrative Templates\Microsoft         Table 1.36. Block opening of HTML file
Office PowerPoint 2007\Block file formats\Open\Block opening      types
of Html file types (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Fil
eOpenBlock
(1) User Configuration\Administrative Templates\Microsoft         Table 1.39. Block opening of Outlines
Office PowerPoint 2007\Block file formats\Open\Block opening
of Outlines (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Fil
eOpenBlock
(1) User Configuration\Administrative Templates\Microsoft         Table 1.31. Block opening of Converters
Office PowerPoint 2007\Block file formats\Open\Block opening
of Converters (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Fil
eOpenBlock
(1) User Configuration\Administrative Templates\Microsoft         Table 1.57. Block saving of Open Xml
Office PowerPoint 2007\Block file formats\Save\Block saving       file types
of Open Xml file types (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Fil
eSaveBlock
(1) User Configuration\Administrative Templates\Microsoft         Table 1.51. Block saving of Binary file
Office PowerPoint 2007\Block file formats\Save\Block saving       types
of Binary file types (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Fil
eSaveBlock
(1) User Configuration\Administrative Templates\Microsoft         Table 1.56. Block saving of HTML file
Office PowerPoint 2007\Block file formats\Save\Block saving       types
of Html file types (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Fil
eSaveBlock
(1) User Configuration\Administrative Templates\Microsoft         Table 1.58. Block saving of Outlines
Office PowerPoint 2007\Block file formats\Save\Block saving
of Outlines (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Fil
eSaveBlock
(1) User Configuration\Administrative Templates\Microsoft         Table 1.54. Block saving of
Office PowerPoint 2007\Block file formats\Save\Block saving       GraphicFilters
of GraphicFilters (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\Security\Fil
eSaveBlock
(1) User Configuration\Administrative Templates\Microsoft         Table 1.115. Disable Slide Update
Office PowerPoint 2007\Block file
formats\Miscellaneous\Disable Slide Update (2)
Software\Policies\Microsoft\Office\12.0\PowerPoint\slide
libraries
(1) User Configuration\Administrative Templates\Microsoft         Table 1.157. Hidden text
Office Word 2007\Word Options\Display\Hidden text (2)
Software\Policies\Microsoft\Office\12.0\Word\Options\vpref
(1) User Configuration\Administrative Templates\Microsoft         Table 1.212. Save files in this format
Office Word 2007\Word Options\Save\Save files in this format
(Word document (*.docx) | Single Files Web Page (*.mht) |
Web Page (*.htm; *.html) | Web Page, Filtered (*.htm, *.html) |
Rich Text Format (*.rtf) | Plain Text (*.txt) | Word 6.0/95
(*.doc) | Word 6.0/95 - Chinese (Simplified) (*.doc) | Word
6.0/95 - Chinese (Traditional) (*.doc) | Word 6.0/95 - Japanese
(*.doc) | Word 6.0/95 - Korean (*.doc) | Word 97-2002 & 6.0/95
- RTF | Word 5.1 for Macintosh (*.mcw) | Word 5.0 for
Macintosh (*.mcw) | Word 2.x for Windows (*.doc) | Works 4.0
for Windows (*.wps) | WordPerfect 5.x for Windows (*.doc) |
WordPerfect 5.1 for DOS (*.doc) | Word 2007 Macro Enabled
Document (*.docm) | Word 2007 Macro Free Template
(*.dotx) | Word 2007 Macro Enabled Template (*.dotm) | Word
97 - 2003 Document (*.doc) | Word 97 - 2003 Template (*.dot)
| Flat XML Document (*.xml)) (2)
Software\Policies\Microsoft\Office\12.0\Word\Options




(1) User Configuration\Administrative Templates\Microsoft
Office Word 2007\Word Options\Advanced\Number of
documents in the Recent Documents list (0-50) (2)
Software\Policies\Microsoft\Office\12.0\Word\File MRU


(1) User Configuration\Administrative Templates\Microsoft         Table 1.231. Update automatic links at
Office Word 2007\Word Options\Advanced\Update automatic           Open
links at Open (2)
Software\Policies\Microsoft\Office\12.0\Word\Options
(1) User Configuration\Administrative Templates\Microsoft
Office Word 2007\Word Options\Advanced\E-mail
Options\Save smart tags in e-mail (2)
Software\Policies\Microsoft\Office\12.0\Word\Options\vpref
(1) User Configuration\Administrative Templates\Microsoft       Table 1.83. Determine whether to force
Office Word 2007\Word Options\Security\Trust                    encrypted macros to be scanned in
Center\Determine whether to force encrypted macros to be        Microsoft Word Open XML documents
scanned in Microsoft Word Open XML documents (2)
Software\Policies\Microsoft\Office\12.0\Word\Security


(1) User Configuration\Administrative Templates\Microsoft       Table 1.87. Disable all application add-
Office Word 2007\Word Options\Security\Trust Center\Disable     ins
all application add-ins (2)
Software\Policies\Microsoft\Office\12.0\Word\Security

(1) User Configuration\Administrative Templates\Microsoft       Table 1.200. Require that application
Office Word 2007\Word Options\Security\Trust                    add-ins are signed by Trusted Publisher
Center\Require that application add-ins are signed by Trusted
Publisher (2)
Software\Policies\Microsoft\Office\12.0\Word\Security

(1) User Configuration\Administrative Templates\Microsoft       Table 1.120. Disable Trust Bar
Office Word 2007\Word Options\Security\Trust Center\Disable     Notification for unsigned application add-
Trust Bar Notification for unsigned application add-ins (2)     ins
Software\Policies\Microsoft\Office\12.0\Word\Security


(1) User Configuration\Administrative Templates\Microsoft       Table 1.11. Allow Trusted Locations not
Office Word 2007\Word Options\Security\Trust Center\Trusted     on the computer
LocationsAllow Trusted Locations not on the computer (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\Trusted
Locations

(1) User Configuration\Administrative Templates\Microsoft       Table 1.89. Disable all trusted locations
Office Word 2007\Word Options\Security\Trust Center\Trusted
LocationsDisable all trusted locations (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\Trusted
Locations
(1) User Configuration\Administrative Templates\Microsoft       Table 1.94. Disable commands
Office Word 2007\Disable items in user
interface\Predefined\Disable commands (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft       Table 1.94. Disable commands
Office Word 2007\Disable items in user
interface\Predefined\Disable commands - Office Button | Word
Options | Customize | All Commands | Save As Web Page (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft      Table 1.94. Disable commands
Office Word 2007\Disable items in user
interface\Predefined\Disable commands - Office Button | Word
Options | Customize | All Commands | Web Page Preview (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledCmdBar
ItemsCheckBoxes

(1) User Configuration\Administrative Templates\Microsoft      Table 1.94. Disable commands
Office Word 2007\Disable items in user
interface\Predefined\Disable commands - Office Button | Send
| Email (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft      Table 1.94. Disable commands
Office Word 2007\Disable items in user
interface\Predefined\Disable commands - Insert | Links |
Hyperlink (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft      Table 1.94. Disable commands
Office Word 2007\Disable items in user
interface\Predefined\Disable commands - Review | Protect |
Protect Document (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft      Table 1.94. Disable commands
Office Word 2007\Disable items in user
interface\Predefined\Disable commands - View | Macros |
Macros (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft      Table 1.94. Disable commands
Office Word 2007\Disable items in user
interface\Predefined\Disable commands - Developer | Code |
Macros (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft      Table 1.94. Disable commands
Office Word 2007\Disable items in user
interface\Predefined\Disable commands - Developer | Code |
Record Macro (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft      Table 1.94. Disable commands
Office Word 2007\Disable items in user
interface\Predefined\Disable commands - Developer | Code |
Macro Security (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office Word 2007\Disable items in user
interface\Predefined\Disable commands - Developer | Code |
Visual Basic (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.94. Disable commands
Office Word 2007\Disable items in user
interface\Predefined\Disable commands - Developer |
Templates | Document Template (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledCmdBar
ItemsCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.114. Disable shortcut keys
Office Word 2007\Disable items in user
interface\Predefined\Disable shortcut keys (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledShortcut
KeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.114. Disable shortcut keys
Office Word 2007\Disable items in user
interface\Predefined\Disable shortcut keys - Ctrl+F (Home |
Editing | Find) (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledShortcut
KeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.114. Disable shortcut keys
Office Word 2007\Disable items in user
interface\Predefined\Disable shortcut keys - Ctrl+K (Insert |
Links | Hyperlink) (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledShortcut
KeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.114. Disable shortcut keys
Office Word 2007\Disable items in user
interface\Predefined\Disable shortcut keys - Alt+F8 (Developer
| Code | Macros) (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledShortcut
KeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.114. Disable shortcut keys
Office Word 2007\Disable items in user
interface\Predefined\Disable shortcut keys - Alt+F11
(Developer | Code | Visual Basic) (2)
Software\Policies\Microsoft\Office\12.0\Word\DisabledShortcut
KeysCheckBoxes
(1) User Configuration\Administrative Templates\Microsoft        Table 1.43. Block opening of pre-
Office Word 2007\Block file formats\Open\Block opening of        release versions of file formats new to
pre-release versions of file formats new to Word 2007 (2)        Word 2007
Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpe
nBlock

(1) User Configuration\Administrative Templates\Microsoft        Table 1.38. Block opening of Open XML
Office Word 2007\Block file formats\Open\Block opening of        file types
Open XML file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.30. Block opening of Binary file
Office Word 2007\Block file formats\Open\Block opening of       types
Binary file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.36. Block opening of HTML file
Office Word 2007\Block file formats\Open\Block opening of       types
HTML file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.47. Block opening of Word 2003
Office Word 2007\Block file formats\Open\Block opening of       XML file types
Word 2003 XML file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.45. Block opening of RTF file
Office Word 2007\Block file formats\Open\Block opening of       types
RTF file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.28. Block open Converters
Office Word 2007\Block file formats\Open\Block open
Converters (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.46. Block opening of Text file
Office Word 2007\Block file formats\Open\Block opening of       types
Text file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.37. Block opening of Internal file
Office Word 2007\Block file formats\Open\Block opening of       types
Internal file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.33. Block opening of files before
Office Word 2007\Block file formats\Open\Block opening of       version
files before version (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpe
nBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.57. Block saving of Open Xml
Office Word 2007\Block file formats\Save\Block saving of        file types
Open XML file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.51. Block saving of Binary file
Office Word 2007\Block file formats\Save\Block saving of        types
Binary file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.56. Block saving of HTML file
Office Word 2007\Block file formats\Save\Block saving of        types
HTML file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.61. Block saving of Word 2003
Office Word 2007\Block file formats\Save\Block saving of        XML file types
Word 2003 XML file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.59. Block saving of RTF file
Office Word 2007\Block file formats\Save\Block saving of RTF    types
file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.53. Block saving of Converters
Office Word 2007\Block file formats\Save\Block saving of
Converters (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileSav
eBlock
(1) User Configuration\Administrative Templates\Microsoft       Table 1.60. Block saving of Text file
Office Word 2007\Block file formats\Save\Block saving of Text   types
file types (2)
Software\Policies\Microsoft\Office\12.0\Word\Security\FileSav
eBlock

(1) Computer Configuration\Administrative                       Table 2.6. InfoPath APTCA Assembly
Templates\Microsoft Office InfoPath 2007                        allowable list
(Machine)\Security\InfoPath APTCA Assembly Whitelist (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security\APT
CA

(1) Computer Configuration\Administrative
Templates\Microsoft Office InfoPath 2007
(Machine)\Security\Windows Internet Explorer Feature Control
Opt-In (None | InfoPath.exe, Document Information Panel and
Workflow forms | InfoPath.exe, Document Information Panel,
Workflow forms and 3rd Party Hosting) (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security



(1) Computer Configuration\Administrative                       Table 2.7. InfoPath APTCA Assembly
Templates\Microsoft Office InfoPath 2007                        Allowable List Enforcement
(Machine)\Security\InfoPath APTCA Assembly Whitelist
Enforcement (2)
Software\Policies\Microsoft\Office\12.0\InfoPath\Security
(1) Computer Configuration\Administrative                   Table 2.3. Disable Package Repair
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\Disable Package Repair (2)
Software\Policies\Microsoft\Office\12.0\Common\OpenXMLFo
rmat
(1) Computer Configuration\Administrative                   Table 2.4. Disable user name and
Templates\Microsoft Office 2007 system (Machine)\Security   password
Settings\IE Security\Disable user name and password (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME
_PASSWORD_DISABLE

(1) Computer Configuration\Administrative                   Table 2.4. Disable user name and
Templates\Microsoft Office 2007 system (Machine)\Security   password
Settings\IE Security\Disable user name and password -
excel.exe (2) Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME
_PASSWORD_DISABLE

(1) Computer Configuration\Administrative                   Table 2.4. Disable user name and
Templates\Microsoft Office 2007 system (Machine)\Security   password
Settings\IE Security\Disable user name and password -
powerpnt.exe (2) Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME
_PASSWORD_DISABLE

(1) Computer Configuration\Administrative                   Table 2.4. Disable user name and
Templates\Microsoft Office 2007 system (Machine)\Security   password
Settings\IE Security\Disable user name and password -
pptview.exe (2) Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME
_PASSWORD_DISABLE

(1) Computer Configuration\Administrative                   Table 2.4. Disable user name and
Templates\Microsoft Office 2007 system (Machine)\Security   password
Settings\IE Security\Disable user name and password -
winword.exe (2) Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME
_PASSWORD_DISABLE

(1) Computer Configuration\Administrative                   Table 2.4. Disable user name and
Templates\Microsoft Office 2007 system (Machine)\Security   password
Settings\IE Security\Disable user name and password -
outlook.exe (2) Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME
_PASSWORD_DISABLE
(1) Computer Configuration\Administrative                   Table 2.4. Disable user name and
Templates\Microsoft Office 2007 system (Machine)\Security   password
Settings\IE Security\Disable user name and password -
spDesign.exe (2) Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME
_PASSWORD_DISABLE

(1) Computer Configuration\Administrative                   Table 2.4. Disable user name and
Templates\Microsoft Office 2007 system (Machine)\Security   password
Settings\IE Security\Disable user name and password -
msaccess.exe (2) Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME
_PASSWORD_DISABLE

(1) Computer Configuration\Administrative                   Table 2.1. Bind to object
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Bind to object (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJ
ECT
(1) Computer Configuration\Administrative                   Table 2.1. Bind to object
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Bind to object - excel.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJ
ECT
(1) Computer Configuration\Administrative                   Table 2.1. Bind to object
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Bind to object - powerpnt.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJ
ECT
(1) Computer Configuration\Administrative                   Table 2.1. Bind to object
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Bind to object - pptview.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJ
ECT
(1) Computer Configuration\Administrative                   Table 2.1. Bind to object
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Bind to object - winword.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJ
ECT
(1) Computer Configuration\Administrative                   Table 2.1. Bind to object
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Bind to object - outlook.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJ
ECT
(1) Computer Configuration\Administrative                   Table 2.1. Bind to object
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Bind to object - spDesign.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJ
ECT
(1) Computer Configuration\Administrative                   Table 2.1. Bind to object
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Bind to object - msaccess.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJ
ECT
(1) Computer Configuration\Administrative                   Table 2.9. Saved from URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Saved from URL (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILEC
HECK
(1) Computer Configuration\Administrative                   Table 2.9. Saved from URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Saved from URL - excel.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILEC
HECK
(1) Computer Configuration\Administrative                   Table 2.9. Saved from URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Saved from URL - powerpnt.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILEC
HECK
(1) Computer Configuration\Administrative                   Table 2.9. Saved from URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Saved from URL - pptview.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILEC
HECK
(1) Computer Configuration\Administrative                   Table 2.9. Saved from URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Saved from URL - winword.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILEC
HECK
(1) Computer Configuration\Administrative                   Table 2.9. Saved from URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Saved from URL - outlook.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILEC
HECK
(1) Computer Configuration\Administrative                   Table 2.9. Saved from URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Saved from URL - spDesign.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILEC
HECK
(1) Computer Configuration\Administrative                   Table 2.9. Saved from URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Saved from URL - msaccess.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILEC
HECK
(1) Computer Configuration\Administrative                   Table 2.8. Navigate URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Navigate URL (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIG
ATE_URL
(1) Computer Configuration\Administrative                   Table 2.8. Navigate URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Navigate URL - excel.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIG
ATE_URL
(1) Computer Configuration\Administrative                   Table 2.8. Navigate URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Navigate URL - powerpnt.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIG
ATE_URL
(1) Computer Configuration\Administrative                   Table 2.8. Navigate URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Navigate URL - pptview.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIG
ATE_URL
(1) Computer Configuration\Administrative                   Table 2.8. Navigate URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Navigate URL - winword.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIG
ATE_URL
(1) Computer Configuration\Administrative                   Table 2.8. Navigate URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Navigate URL - outlook.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIG
ATE_URL
(1) Computer Configuration\Administrative                   Table 2.8. Navigate URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Navigate URL - spDesign.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIG
ATE_URL
(1) Computer Configuration\Administrative                   Table 2.8. Navigate URL
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Navigate URL - msaccess.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIG
ATE_URL
(1) Computer Configuration\Administrative                   Table 2.2. Block popups
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Block popups (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPM
ANAGEMENT
(1) Computer Configuration\Administrative                   Table 2.2. Block popups
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Block popups - excel.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPM
ANAGEMENT
(1) Computer Configuration\Administrative                   Table 2.2. Block popups
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Block popups - powerpnt.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPM
ANAGEMENT
(1) Computer Configuration\Administrative                   Table 2.2. Block popups
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Block popups - pptview.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPM
ANAGEMENT
(1) Computer Configuration\Administrative                   Table 2.2. Block popups
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Block popups - winword.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPM
ANAGEMENT
(1) Computer Configuration\Administrative                   Table 2.2. Block popups
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Block popups - outlook.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPM
ANAGEMENT
(1) Computer Configuration\Administrative                         Table 2.2. Block popups
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Block popups - spDesign.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPM
ANAGEMENT
(1) Computer Configuration\Administrative                         Table 2.2. Block popups
Templates\Microsoft Office 2007 system (Machine)\Security
Settings\IE Security\Block popups - msaccess.exe (2)
Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPM
ANAGEMENT

(1) User Configuration\Administrative Templates\Microsoft
Office Outlook 2007\Security\Prevent users from customizing
attachment security settings (2)
HKCU\Software\Policies\Microsoft\Office\12.0\Outlook -
DisallowAttachmentCustomization
(1) Computer Configuration\Administrative
Templates\Microsoft Office 2003\Security Settings\Access:
Macro Security Leve (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Access\Security
- Level (3) User Configuration\Administrative
Templates\Microsoft Office Access
2003\Tools\Macros\Security\Security level (4)
HKCU\Software\Policies\Microsoft\Office\11.0\Access\Security
- Level

(1) Computer Configuration\Administrative
Templates\Microsoft Office 2003\Security Settings\Access:
Trust all installed add – ins and templates (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Access\Security
- DontTrustInstalledFiles (3) User Configuration\Administrative
Templates\Microsoft Office Access
2003\Tools\Macros\Security\Trust all installed add-ins and
templates (4)
HKCU\Software\Policies\Microsoft\Office\11.0\Access\Security
- DontTrustInstalledFiles
(1) Computer Configuration\Administrative
Templates\Microsoft Office 2003\Security Settings\Excel:
Macro Security Level (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Excel\Security -
Level(3) User Configuration\Administrative
Templates\Microsoft Office Excel
2003\Tools\Macros\Security\Security level (4)
HKCU\Software\Policies\Microsoft\Office\11.0\Excel\Security -
Level
(1) Computer Configuration\Administrative
Templates\Microsoft Office 2003\Security Settings\Excel:
Trust all installed add – ins and templates (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Excel\Security -
DontTrustInstalledFiles (3) User Configuration\Administrative
Templates\Microsoft Office Excel
2003\Tools\Macros\Security\Trust all installed add-ins and
templates (4)
HKCU\Software\Policies\Microsoft\Office\11.0\Excel\Security -
DontTrustInstalledFiles
(1) Computer Configuration\Administrative
Templates\Microsoft Office 2003\Security Settings\Outlook:
Macro Security Level (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Outlook\Securit
y - Level (3) User Configuration\Administrative
Templates\Microsoft Office Outlook
2003\Tools\Macros\Security\Security Level (4)
HKCU\Software\Policies\Microsoft\Office\11.0\Outlook -
Security\Level
(1) User Configuration\Administrative Templates\Microsoft
Office Outlook 2003\Tools\Macros\Security\Outlook: Trust all
installed add-ins and templates (2)
HKCU\Software\Policies\Microsoft\Office\11.0\Outlook\Securit
y - DontTrustInstalledFiles




(1) User Configuration\Administrative Templates\Microsoft
Office Outlook 2003\Tools\Options\Security\Outlook virus
security settings (2)
HKCU\Software\Policies\Microsoft\Security -
CheckAdminSettings




(1) User Configuration\Administrative Templates\Microsoft
Office Outlook
2003\Tools\Options\Security\Cryptography\S/MIME receipt
requests (2)
HKCU\Software\Policies\Microsoft\Office\11.0\Outlook\Securit
y - RespondToReceiptRequests
(1) Computer Configuration\Administrative
Templates\Microsoft Office 2003\Security
Settings\PowerPoint: Macro Security Level (2)
HKLM\Software\Policies\Microsoft\Office\11.0\PowerPoint\Sec
urity - Level (3) User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2003\Tools\Macro\Security\Security Level (4)
HKCU\Software\Policies\Microsoft\Office\11.0\PowerPoint -
Security\Level
(1) Computer Configuration\Administrative
Templates\Microsoft Office 2003\Security
Settings\PowerPoint: Trust all installed add – ins and
templates (2)
HKLM\Software\Policies\Microsoft\Office\11.0\PowerPoint\Sec
urity - DontTrustInstalledFiles (3) User
Configuration\Administrative Templates\Microsoft Office
PowerPoint 2003\Tools\Macro\Security\Trust all installed add
– ins and templates (4)
HKCU\Software\Policies\Microsoft\Office\11.0\PowerPoint\Sec
urity - DontTrustInstalledFiles
(1) Computer Configuration\Administrative
Templates\Microsoft Office 2003\Security Settings\Publisher:
Macro Security Level (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Publisher\Securi
ty - Level

(1) Computer Configuration\Administrative
Templates\Microsoft Office 2003\Security Settings\Publisher:
Trust all installed add–ins and templates (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Publisher\Securi
ty - DontTrustInstalledFiles
(1) Computer Configuration\Administrative
Templates\Microsoft Office 2003\Security Settings\Word:
Macro Security Level (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Word\Security -
Level (3) User Configuration\Administrative
Templates\Microsoft Office Word
2003\Tools\Macro\Security\Security Level (4)
HKCU\Software\Policies\Microsoft\Office\11.0\Word -
Security\Level
(1) Computer Configuration\Administrative
Templates\Microsoft Office 2003\Security Settings\Word:
Trust all installed add–ins and templates (2)
HKLM\Software\Policies\Microsoft\Office\11.0\Word\Security -
DontTrustInstalledFiles (3) User Configuration\Administrative
Templates\Microsoft Office Word
2003\Tools\Macro\Security\Trust all installed add – ins and
templates (4)
HKCU\Software\Policies\Microsoft\Office\11.0\Word\Security -
DontTrustInstalledFiles
(1) User Configuration\Administrative Templates\Microsoft
Office Word 2003\Tools\Options\Security\Store random
number to improve merge accuracy (2)
HKCU\Software\Policies\Microsoft\Office\11.0\Word\Options\v
pref - fDontSaveRSID_1804_1
(1) User Configuration\Administrative Templates\Microsoft
Office 2003\Security Settings\Prevent Users from Changing
Office Encryption Settings (2)
HKCU\Software\Policies\Microsoft\Office\11.0\Common\Securi
ty - DisableCustomEncryption
                                                        NIST SCAP
     Microsoft Office 2007    NIST SCAP Microsoft
                                                      Microsoft Office
  Recommendations (Security Office 2007 OVAL (SCAP-
                                                    2007 XCCDF (SCAP-
    Settings for Office 2007 Office2007-OVAL-Beta-
                                                    Office2007-XCCDF-
      Applications.xlsx)             v1.xml)
                                                       Beta-v1.xml )

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Disable VBA
for Office applications, Computer
Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\Disable
VBA for Office applications




                                                                                DisableVBAForOfficeAppl
                                                 oval:org.mitre.oval:def:771    ications
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\ActiveX
Control Initialization (1 | 2 | 3 | 4 | 5 | 6)




                                                                                ActiveXControlInitializatio
                                                 oval:org.mitre.oval:def:814    n
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Privacy\Trust Center\Enable
Customer Experience Improvement                                                 EnableCustomerExperien
Program                                          oval:org.mitre.oval:def:829    ceImprovementProgram
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Privacy\Trust                                                            AutomaticallyReceiveSma
Center\Automatically receive small                                              llUpdatesToImproveRelia
updates to improve reliability                   oval:org.mitre.oval:def:1473   bility
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Tools | Options | General |
Service Options...\Online
Content\Online content options (Never
show online content or entry points |
Search only offline content whenever
available | Search online content
whenever available)                              oval:org.mitre.oval:def:1302   OnlineContentOptions
User Configuration\Administrative
Templates\Microsoft Office Access
2007\Application Settings\Security\Trust
Center\VBA Macro Warning Settings
(Trust Bar warning for all macros | Trust
Bar warning for digitally signed macros
only (unsigned macros will be disabled) |
No Warnings for all macros but disable
all macros | No Security checks for
macros (Not recommended, code in all
documents can run))
                                                                           VBAMacroWarningSettin
                                            oval:org.mitre.oval:def:1403   gs-Access
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Security\Trust
Center\VBA Macro Warning Settings
(Trust Bar warning for all macros | Trust
Bar warning for digitally signed macros
only (unsigned macros will be disabled) |
No Warnings for all macros but disable
all macros | No Security checks for
macros (Not recommended, code in all
documents can run))                                                        VBAMacroWarningSettin
                                            oval:org.mitre.oval:def:649    gs-Excel
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Security\Trust
Center\Trust access to Visual Basic
Project




                                                                           TrustAccessToVisualBasi
                                            oval:org.mitre.oval:def:1560   cProject-Excel
User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint Options\Security\Trust
Center\VBA Macro Warning Settings
(Trust Bar warning for all macros | Trust
Bar warning for digitally signed macros
only (unsigned macros will be disabled) |
No Warnings for all macros but disable
all macros | No Security checks for
macros (Not recommended, code in all
documents can run))
                                                                           VBAMacroWarningSettin
                                            oval:org.mitre.oval:def:654    gs-PowerPoint
User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint Options\Security\Trust
Center\Trust access to Visual Basic
Project                                                                    TrustAccessToVisualBasi
                                            oval:org.mitre.oval:def:665    cProject-PowerPoint



                                                                           DisableRememberPassw
                                            oval:org.mitre.oval:def:1298   ord
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Programmatic Security\Trusted
Add-insConfigure trusted add-ins



                                                                           ConfigureAddInTrustLeve
                                            oval:org.mitre.oval:def:1390   l


                                                                           DisableRememberPassw
                                                                           ordForInternetEmailAcco
                                            oval:org.mitre.oval:def:1232   unts
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Minimum
encryption settings
                                                                           MinimumEncryptionSettin
                                            oval:org.mitre.oval:def:661    gs
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Do not
check e-mail address against address                                       DoNotCheckEmailAddres
of certificates being used                                                 sAgainstAddressOfCertifi
                                            oval:org.mitre.oval:def:1399   catesBeingUsed
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Send all
signed messages as clear signed
messages




                                                                          SendAllSignedMessages
                                           oval:org.mitre.oval:def:1388   AsClearSignedMessages
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Request an
S/MIME receipt for all S/MIME signed                                      RequestAnSMIMEReceipt
messages                                                                  ForAllSMIMESignedMess
                                           oval:org.mitre.oval:def:705    ages
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Do not
display 'Publish to GAL' button




                                                                          DoNotDisplayPublishToG
                                           oval:org.mitre.oval:def:741    ALButton
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Signature
Warning (Let user decide if they want to
be warned | Always warn about invalid
signatures | Never warn about invalid
signatures)




                                           oval:org.mitre.oval:def:756    SignatureWarning
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Enable
Cryptography Icons




                                          oval:org.mitre.oval:def:1716   EnableCryptographyIcons
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Signature
Status dialog box\Retrieving CRLs
(Certificate Revocation Lists) (Use
system Default | When online always
retreive the CRL | Never retreive the
CRL)                                      oval:org.mitre.oval:def:1700   RetrievingCRLs
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Security\Trust
Center\VBA Macro Warning Settings
(Trust Bar warning for all macros | Trust
Bar warning for digitally signed macros
only (unsigned macros will be disabled) |
No Warnings for all macros but disable
all macros | No )
                                                                         VBMacroWarningSettings-
                                         oval:org.mitre.oval:def:1350    Word
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Security\Trust
Center\Trust access to Visual Basic
Project




                                                                         TrustAccessToVisualBasi
                                         oval:org.mitre.oval:def:1713    cProject-Word
                                                                         WarnBeforePrintingSavin
                                                                         gOrSendingAFileThatCon
                                                                         tainsTrackedChangesOr
                                          oval:org.mitre.oval:def:788    Comments
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Miscellaneous\Block updates                                       BlockUpdatesFromTheOf
from the Office Update Site from                                         ficeUpdateSiteFromApplyi
applying                                  oval:org.mitre.oval:def:1755   ng
User Configuration\Administrative
Templates\Microsoft Office Access
2007\Application Settings\Web
Options\General\Underline hyperlinks
User Configuration\Administrative
Templates\Microsoft Office Access
2007\Application
Settings\General\General\Number of
documents in the Recent Documents list
(0-9)
User Configuration\Administrative
Templates\Microsoft Office Access
2007\Application Settings\Security\Trust
Center\Disable Trust Bar Notification for
unsigned application add-ins

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Application Settings\Security\Trust
Center\Disable all application add-ins

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Application Settings\Security\Trust
Center\Require that application add-ins
are signed by Trusted Publisher

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Application Settings\Security\Trust
Center\Trusted Locations\Disable all
trusted locations
User Configuration\Administrative
Templates\Microsoft Office Access
2007\Application Settings\Security\Trust
Center\Trusted Locations\Allow Trusted
Locations not on the computer


User Configuration\Administrative
Templates\Microsoft Office Access
2007\Application Settings\Security\Trust
Center\Trusted Locations\Modal Trust
Decision Only

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable commands

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable commands
- Office Button | E-Mail

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable commands
- Office Button | Access Options |
Customize | All Commands | Insert
Hyperlink
User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable commands
- Database Tools | Database Tools |
Encrypt with Password

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable commands
- Database Tools | Administer | Users
and Permission | User and Group
Permissions
User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable commands
- Database Tools | Administer | Users
and Permissions | User and Group
Accounts

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable commands
- Database Tools | Administer | Users
and Permission | User-Level Security
Wizard...

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable commands
- Database Tools | Database Tools |
Encode/Decode Database

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable commands
- Database Tools | Macro | Visual Basic

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable commands
- Database Tools | Macro | Run Macro

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Database Tools |
Macro | Convert Macros to Visual Basic

User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Database Tools |
Macro | Create Shortcut Menu from
Macro
User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable shortcut
keys
User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable commands
- Ctrl+K (Office Button | Access Options
| Customize | All Commands | Insert
Hyperlinks)


User Configuration\Administrative
Templates\Microsoft Office Access
2007\Disable items in user
interface\Predefined\Disable commands
- Alt+F11 (Database Tools | Macro |
Visual Basic)
User Configuration\Administrative
Templates\Microsoft Office Access
2007\Miscellaneous\Default file format
(Access 2007 | Access 2002-2003)


User Configuration\Administrative
Templates\Microsoft Office Access
2007\Miscellaneous\Do not prompt to
convert older databases

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel
Options\Proofing\Autocorrect
Options\Internet and network paths as
hyperlinks
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Save\Save Excel
files as (Excel Workbook (*.xlsx) | Excel
Macro-Enabled Workbook (*.xlsm) |
Excel Binary Workbook (*.xlsb) | Web
Page (*.htm; *.html) | Excel 97-2003
Workbook (*.xls) | Excel 5.0/95
Workbook (*.xls))



User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Save\Disable
AutoRepublish
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel
Options\Save\AutoRepublish Warning
Alert (Always show the alert before
publishing | Never show the alert before
publishing)


User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Security\Determine
whether to force encrypted macros to be
scanned in Microsoft Excel Open XML
workbooks

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Security\Force file
extension to match file type (Allow
different | Allow different, but warn |
Always match file type)

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Security\Trust
Center\Store macro in Personal Macro
Workbook by default
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Security\Trust
Center\Disable all application add-ins

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Security\Trust
Center\Require that application add-ins
are signed by Trusted Publisher

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Security\Trust
Center\Disable Trust Bar Notification for
unsigned application add-ins

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Security\Trust
Center\Trusted LocationsAllow Trusted
Locations not on the computer
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Security\Trust
Center\Trusted LocationsDisable all
trusted locations
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Advanced\Ignore
other applications

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Advanced\Ask to
update automatic links
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Advanced\Number
of documents in the Recent Documents
list (0-17)

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Advanced\Web
Options…\GeneralSave any additional
data necessary to maintain formulas

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Excel Options\Advanced\Web
Options…\GeneralLoad pictures from
Web pages not created in Excel
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Data Recovery\Do not show data
extraction options when opening corrupt
workbooks

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Data Recovery\Assume structured
storage format of workbook is intact
when recovering data

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Data Recovery\Corrupt formula
conversion (Convert unrecoverable
references to: values | #REF or #NAME)
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Data Access Security\Connection
File Locations

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Data Access Security\Automatic
Query Refresh (Prompt for all
workbooks | Do not prompt; do not allow
auto refresh | Do not prompt; allow auto
refresh)


User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- Office Button | Excel Options |
Customize | All Commands | Save as
Web Page
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- Office Button | Excel Options |
Customize | All Commands | Web Page
Preview
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- Office Button | Send | Email

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- Insert | Links | Hyperlink

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- Review | Changes | Protect Sheet
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- Review | Changes | Protect Workbook

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- Review | Changes | Protect and Share
Workbook
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- View | Macros | Macros

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- Developer | Code | Macros

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- Developer | Code | Record Macro

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- Developer | Code | Macro Security

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- Developer | Code | Visual Basic

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable commands
- Office Button | Excel Options |
Customize | All Commands | Document
Location
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable shortcut
keys
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable shortcut
keys - Ctrl+K (Insert | Links | Hyperlink)

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable shortcut
keys - Alt+F8 (Developer | Code |
Macros)
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Disable items in user
interface\Predefined\Disable shortcut
keys - Alt+F11 (Developer | Code |
Visual Basic)
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Open\Block
opening of pre-release versions of file
formats new to Excel 2007

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Open\Block
opening of Open XML file types

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Open\Block
opening of Binary 12 file types

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Open\Block
opening of Binary file types

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Open\Block
opening of Html and Xmlss files types
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Open\Block
opening of Xml file types

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Open\Block
opening of DIF and SYLK file types

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Open\Block
opening of Text file types

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Open\Block
opening of Xll file type

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Save\Block
saving of Open Xml file types

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Save\Block
saving of Binary12 file types

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Save\Block
saving of Binary file types

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Save\Block
saving of Html and Xmlss file types

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Save\Block
saving Xml file types

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Save\Block
saving DIF and SYLK file types
User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Block file formats\Save\Block
saving of Text file types

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Miscellaneous\Locally cache
network file storages

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Miscellaneous\Locally cache
PivotTable reports

User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Miscellaneous\OLAP PivotTable
User Defined Function (UDF) security
setting (Allow ALL UDFs | Allow safe
UDFs only | Allow NO UDFs)


User Configuration\Administrative
Templates\Microsoft Office Excel
2007\Miscellaneous\Recognize
SmartTags
User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Tools | Options\General\Number
of documents in the Recent Documents
list (0 - 9)

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Tools |
Options\Advanced\Offline\Offline Mode
status (Disabled | Enabled, InfoPath in
Offline Mode | Enabled, InfoPath not in
Offline Mode)

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- File | Print
User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- File | Send to Mail Recipient

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- File | Open from SharePoint Site

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- File | Print Preview

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- File | Page Setup

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- Insert | Hyperlinks...

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- Tools | Set Language

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- Tools | Customize...

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- Tools | Options...
User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- Help | Microsoft Office Online

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- Office Diagnostics

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- Help | Activate Product...

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable commands
- Print Default
User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable shortcut
keys
User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable shortcut
keys - Print Shortcut (Ctrl+P)

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Predefined\Disable shortcut
keys - Insert Hyperlink Shortcut (Ctrl+K)

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Control behavior for
Windows SharePoint Services gradual
upgrade (Allow redirections to any
location | Allow redirections to Intranet
only | Block all redirections)
User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Disable opening of
solutions from the Internet security zone


User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Disable fully trusted
solutions full access to computer

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Allow the use of ActiveX
Custom Controls in InfoPath forms


User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Run forms in restricted
mode if they do not specify a publish
location and use only features
introduced before InfoPath 2003 SP1



User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Allow file types as
attachments to forms

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Block specific file types
as attachments to forms

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Prevent users from
allowing unsafe file types to be attached
to forms

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Display a warning that a
form is digitally signed
User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Control behavior when
opening forms in the Internet security
zone (Block | Prompt | Allow)


User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Control behavior when
opening forms in the Intranet security
zone (Block | Prompt | Allow)


User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Control behavior when
opening forms in the Local Machine
security zone (Block | Prompt | Allow)



User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Control behavior when
opening forms in the Trusted Site
security zone (Block | Prompt | Allow)


User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Beaconing UI for forms
opened in InfoPath (Never show
beaconing UI | Always show beaconing
UI | Show UI if Form Template is from
Internet Zone)


User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Beaconing UI for forms
opened in InfoPath Editor ActiveX
(Never show beaconing UI | Always
show beaconing UI | Show UI if Form
Template is from Internet Zone)
User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Trust Center\Disable all
application add-ins

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Trust Center\Require that
application add-ins are signed by
Trusted Publisher

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Security\Trust Center\Disable
Trust Bar Notification for unsigned
application add-ins

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Control behavior when opening
InfoPath e-mail forms containing code
or script (Run without prompting |
Prompt before running | Never run)


User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Disable sending form template
with e-mail forms

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Disable dynamic caching of
the form template in InfoPath e-mail
forms

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Disable sending InfoPath 2003
Forms as e-mail forms

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Disable e-mail forms running in
restricted security level
User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Disable e-mail forms from the
Internet security zone
User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Disable e-mail forms from the
Intranet security zone
User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Disable e-mail forms from the
Full Trust security zone

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Disable items in user
interface\Disable InfoPath e-mail forms
in Outlook
User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Restricted Features\Information
Rights Management

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Restricted Features\Custom code

User Configuration\Administrative
Templates\Microsoft Office InfoPath
2007\Miscellaneous\Email Forms
Beaconing UI (Never show UI | Always
show UI | Show UI if XSN is in Internet
Zone)


User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable user
customization of Quick Access Toolbar
via UI
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable user
customization of Quick Access Toolbar
via UI - Disallow in Word
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable user
customization of Quick Access Toolbar
via UI - Disallow in Excel
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable user
customization of Quick Access Toolbar
via UI - Disallow in PowerPoint

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable user
customization of Quick Access Toolbar
via UI - Disallow in Access
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable user
customization of Quick Access Toolbar
via UI - Disallow in Outlook
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable all user
customization of Quick Access Toolbar

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable all user
customization of Quick Access Toolbar -
Disallow in Word
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable all user
customization of Quick Access Toolbar -
Disallow in Excel
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable all user
customization of Quick Access Toolbar -
Disallow in PowerPoint
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable all user
customization of Quick Access Toolbar -
Disallow in Access
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable all user
customization of Quick Access Toolbar -
Disallow in Outlook
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable UI extending
from documents and templates

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable UI extending
from documents and templates -
Disallow in Word
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable UI extending
from documents and templates -
Disallow in Excel
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable UI extending
from documents and templates -
Disallow in PowerPoint
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable UI extending
from documents and templates -
Disallow in Access
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Global
Options\Customize\Disable UI extending
from documents and templates -
Disallow in Outlook
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Tools | AutoCorrect Options...
(Excel, Word, PowerPoint and
Access)\Recognize smart tags in Excel

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Tools | Options | General | Web
Options...\Disable Clip Art and Media
downloads from the client and from
Office Online website
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Tools | Options | General | Web
Options...\Disable template downloads
from the client and from Office Online
website
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Tools | Options | General | Web
Options...\Disable access to updates,
add-ins, and patches on the Office
Online website
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Tools | Options | General | Web
Options...\Prevents users from
uploading document templates to the
Office Online community.
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Tools | Options | General | Web
Options...\Disable training practice
downloads from the Office Online
website
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Tools | Options | General | Web
Options...\Disable customer-submitted
templates downloads from Office Online

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Tools | Options | General | Web
Options...\Files\Open Office documents
as read/write while browsing
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Tools | Options | General | Web
Options...\Browsers\Rely on VML for
displaying graphics in browsers

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Tools | Options | General | Web
Options...\Browsers\Allow PNG as an
output format
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Tools | Options |
Spelling\Proofing Data
Collection\Improve Proofing Tools
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Privacy\Trust Center\Disable
Opt-in Wizard on first run

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Help\Microsoft Office Online
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Disable
Password Caching
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Disable all
Trust Bar notifications for security
issues
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Protect
document metadata for rights managed
Office Open XML Files
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Protect
document metadata for password
protected files.
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Encryption
type for password protected Office
Open XML files
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Encryption
type for password protected Office 97-
2003 files
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Load Controls
in Forms3 (1 | 2 | 3 | 4)
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Automation
Security (Disable macros by default |
Use application macro security level |
Macros enabled)




User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Prevent Word
and Excel from loading managed code
extensions

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Disable
hyperlink warnings
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Disable
password to open UI
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Download
Office Controls
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Disable All
ActiveX
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Security Settings\Trust
Center\Allow mix of policy and user
locations
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Smart Documents (Word,
Excel)\Disable Smart Document's use of
manifests
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Smart Documents (Word,
Excel)\Completely disable the Smart
Documents feature in Word and Excel

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Services\Fax\Disable Internet
Fax feature

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Manage Restricted
Permissions\Prevent users from
changing permissions on rights
managed content
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Manage Restricted
Permissions\Allow users with earlier
versions of Office to read with
browsers...
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Manage Restricted
Permissions\Always require users to
connect to verify permission
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Manage Restricted
Permissions\Always expand groups in
Office when restricting permission for
documents
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Manage Restricted
Permissions\Never allow users to
specify groups when restricting
permission for documents
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Manage Restricted
Permissions\Disable Microsoft Passport
service for content with restricted
permission
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Manage Restricted
Permissions\Do not allow users to
upgrade Information Rights
Management configuration
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Signing\Key Usage Filtering
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Signing\EKU filtering

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Signing\Legacy format
signatures
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Signing\Suppress Office Signing
Providers (Enable Western and East
Asian | Suppress default Western |
Suppress default East Asian | Suppress
both Western and East Asian)



User Configuration\Administrative
Templates\Microsoft Office 2007
system\Signing\Suppress external
signature services menu item

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Office Diagnostics\Disable
Check For Solutions
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Microsoft Save As PDF and
XPS add-ins\Disable inclusion of
document properties in PDF and XPS
output
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Document Information
Panel\Disable Document Information
Panel
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Document Information
Panel\Document Information Panel
Beaconing UI (Never show UI | Always
show UI | Show UI if XSN is in Internet
Zone)
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Server Settings\Disable the
Office client from polling the Office
server for published links
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Office 2007 Converters\Block
opening of pre-release versions of file
formats new to Word 2007 through the
Compatibility Pack for the 2007 Office
system and Word 2007 Open
XML/Word 97-2003 Format Converter



User Configuration\Administrative
Templates\Microsoft Office 2007
system\Office 2007 Converters\Block
opening of pre-release versions of file
formats new to Excel 2007 through the
Compatibility Pack for the 2007 Office
system and Excel 2007 Converter


User Configuration\Administrative
Templates\Microsoft Office 2007
system\Office 2007 Converters\Block
opening of pre-release versions of file
formats new to PowerPoint 2007
through the Compatibility Pack for the
2007 Office system and PowerPoint
2007 Converter

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Miscellaneous\Control Blogging
(Enabled | Only SharePoint blogs
allowed | All blogging disabled)

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Miscellaneous\Enable Smart
Resume

User Configuration\Administrative
Templates\Microsoft Office 2007
system\Miscellaneous\Do not upload
media files
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Miscellaneous\Disable
hyperlinks to web templates in File |
New and task panes
User Configuration\Administrative
Templates\Microsoft Office 2007
system\Miscellaneous\Prevent access
to Web-based file storage

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Preferences\E-
mail Options\Do not allow attachment
previewing in Outlook
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Preferences\E-
mail Options\Read e-mail as plain text

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Preferences\E-
mail Options\Read signed e-mail as
plain text
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Preferences\Calendar
Options\Microsoft Office Online Sharing
ServicePrevent publishing to Office
Online
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Preferences\Calendar
Options\Microsoft Office Online Sharing
ServicePrevent publishing to a DAV
server
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Preferences\Calendar
Options\Microsoft Office Online Sharing
ServiceRestrict level of calendar details
users can publish (All options are
available | Disables 'Full details' |
Disables 'Full details' and 'Limited
details')
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Preferences\Calendar
Options\Microsoft Office Online Sharing
ServiceAccess to published calendars

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Preferences\Calendar
Options\Microsoft Office Online Sharing
ServiceRestrict upload method

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Preferences\Junk E-mail\Hide
Junk Mail UI
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Preferences\Junk E-mail\Junk
E-mail protection level (No Protection,
Low, High, Trusted Lists Only)

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Preferences\Junk E-
mail\Trust E-mail from Contacts
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Preferences\Junk E-mail\Add
e-mail recipients to users' Safe Senders
Lists
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Mail Setup\Dial-
up options

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Mail Setup\Dial-
up options - Warn before switching dial-
up connection
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Mail Setup\Dial-
up options - Hang up when finished
sending, receiving, or updating

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Mail Setup\Dial-
up options - Automatically dial during a
background Send/Receive


User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Mail Format\Do
not allow creating, replying, or
forwarding signatures for e-mail
messages

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Mail
Format\Internet Formatting\Send copy
of pictures with HTML messages
instead of reference to Internet location

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Mail
Format\Internet Formatting\Outlook
Rich Text options (Convert to HTML |
Convert to Plain Text format | Send
Using Outlook Rich Text format)

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Mail
Format\Internet Formatting\Plain text
options
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Mail
Format\Internet Formatting\Plain text
options - Encode attachments in
UUENCODE format when sending a
plain text message
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Mail
Format\Internet Formatting\Message
FormatSet message format (HTML |
Rich Text | Plain Text)
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Other\Make
Outlook the default program for E-mail,
Contacts, and Calendar

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Other\Advanced\Do not allow
folders in non-default stores to be set as
folder home pages
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Other\Advanced\Use Unicode
format when dragging e-mail message
to file system
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Other\Advanced\Do not allow
Outlook object model scripts to run for
shared folders
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools |
Options...\Other\Advanced\Do not allow
Outlook object model scripts to run for
public folders
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Other\Person
Names\Set maximum level of online
status on a person name (Do not allow |
Allow everywhere except To and CC
field | Allow everywhere)
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Other\Person
Names\Display online status on a
person name (Never | Everywhere
except To and CC field | Everywhere)


User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Options...\Other\Person
Names\Turn off Enable the Person
Names Smart Tag option

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Outlook Security Mode
(Outlook Default Security | Use Security
Form from 'Outlook Security Settings'
Public Folder | Use Security Form from
'Outlook 10 Security Settings' Public
Folder | Use Outlook Security Group
Policy)



User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Attachment Security\Display
Level 1 attachments
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Attachment Security\Allow
users to demote attachments to Level 2

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Attachment Security\Do not
prompt about Level 1 attachments when
sending an item
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Attachment Security\Do not
prompt about Level 1 attachments when
closing an item
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Attachment Security\Allow in-
place activation of embedded OLE
objects
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Attachment Security\Display
OLE package objects
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Attachment Security\Add file
extensions to block as Level 1
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Attachment Security\Remove
file extensions blocked as Level 1

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Attachment Security\Add file
extensions to block as Level 2
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Attachment Security\Remove
file extensions blocked as Level 2

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Custom Form Security\Allow
scripts in one-off Outlook forms
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Custom Form Security\Set
Outlook object model Custom Actions
execution prompt (Prompt User |
Automatically Approve | Automatically
Deny | Prompt user based on computer
security)
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Custom Form Security\Set
control ItemProperty prompt (Prompt
User | Automatically Approve |
Automatically Deny | Prompt user based
on computer security)

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Programmatic
Security\Configure Outlook object model
prompt when sending mail (Prompt User
| Automatically Approve | Automatically
Deny | Prompt user based on computer
security)


User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Programmatic
Security\Configure Outlook object model
prompt when accessing an address
book (Prompt User | Automatically
Approve | Automatically Deny | Prompt
user based on computer security)


User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Programmatic
Security\Configure Outlook object model
prompt when reading address
information (Prompt User | Automatically
Approve | Automatically Deny | Prompt
user based on computer security)
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Programmatic
Security\Configure Outlook object model
prompt when responding to meeting and
task requests (Prompt User |
Automatically Approve | Automatically
Deny | Prompt user based on computer
security)


User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Programmatic
Security\Configure Outlook object model
prompt when executing Save As
(Prompt User | Automatically Approve |
Automatically Deny | Prompt user based
on computer security)


User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Programmatic
Security\Configure Outlook object model
prompt When accessing the Formula
property of a UserProperty object
(Prompt User | Automatically Approve |
Automatically Deny | Prompt user based
on computer security)



User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Security Form
Settings\Programmatic
Security\Configure Outlook object model
prompt when accessing address
information via UserProperties.Find
(Prompt User | Automatically Approve |
Automatically Deny | Prompt user based
on computer security)
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Required
Certificate Authority
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\S/MIME
interoperability with external clients:
(Handle internally | Handle externally |
Handle if possible)


User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Always use
Rich Text formatting in S/MIME
messages

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\S/MIME
password settings

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\S/MIME
password settings - Default S/MIME
password time (minutes): (0 -
2147483647)

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\S/MIME
password settings - Maximum S/MIME
password time (minutes): (0 -
2147483647)


User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Message
Formats
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Message
Formats - Support the following
message formats: (S/MIME | Exchange |
Fortezza | S/MIME and Exchange |
S/MIME and Fortezza | Exchange and
Fortezza | S/MIME, Exchange, and
Fortezza)



User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Do not
provide Continue option on Encryption
warning dialog boxes




User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Run in
FIPS compliant mode

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Encrypt all
e-mail messages




User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Sign all e-
mail messages

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\URL for
S/MIME certificates
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Ensure all
S/MIME signed messages have a label

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\S/MIME
receipt requests (Open message if
receipt can't be sent | Don't open
message if receipt can't be sent |
Always prompt before sending receipt |
Never send S/MIME )



User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Fortezza
certificate policies
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Require
SuiteB algorithms for S/MIME
operations

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Signature
Status dialog box\Missing CRLs
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Signature
Status dialog box\Missing CRLs -
Indicate a missing CRL as a(n):
(warning | error)
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Signature
Status dialog box\Missing root
certificates
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Signature
Status dialog box\Missing root
certificates - Indicate a missing root
certificate as a(n): (neither error nor
warning | warning | error)
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Signature
Status dialog box\Promote Level 2
errors as errors, not warnings
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Cryptography\Signature
Status dialog box\Attachment Secure
Temporary Folder
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Automatic Picture
Download Settings\Display pictures and
external content in HTML e-mail

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Automatic Picture
Download Settings\Automatically
download content for e-mail from people
in Safe Senders and Safe Recipients
Lists

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Automatic Picture
Download Settings\Do not permit
download of content from safe zones

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Automatic Picture
Download Settings\Block Trusted Zones

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Automatic Picture
Download Settings\Include Internet in
Safe Zones for Automatic Picture
Download
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Automatic Picture
Download Settings\Include Intranet in
Safe Zones for Automatic Picture
Download
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Trust Center\Security
setting for macros (Always warn | Never
warn, disable all | Warn for signed,
disable unsigned | No security check)


User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Trust Center\Enable links
in e-mail messages

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Security\Trust Center\Apply macro
security settings to macros, add-ins, and
SmartTags


User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Account
Settings\Exchange\Automatically
configure profile based on Active
Directory Primary SMTP address

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Account
Settings\Exchange\Do not allow users to
change permissions on folders

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Account
Settings\Exchange\Enable RPC
encryption
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Account
Settings\Exchange\Authentication with
Exchange Server (Kerberos/NTLM
Password Authentication | Kerberos
Password Authentication | NTLM
Password Authentication)
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Account Settings\RSS
Feeds\Synchronize Outlook RSS Feeds
with Common Feed List

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Account Settings\RSS
Feeds\Turn off RSS feature

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Account Settings\RSS
Feeds\Automatically download
enclosures
User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Account Settings\RSS
Feeds\Download full text of articles as
HTML attachments

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Account Settings\Internet
Calendars\Automatically download
attachments

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Tools | Account Settings\Internet
Calendars\Do not include Internet
Calendar integration in Outlook

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Meeting Workspace\Disable user
entries to server list (Publish default,
allow others | Publish default, disallow
others)

User Configuration\Administrative
Templates\Microsoft Office Outlook
2007\Miscellaneous\Do not expand
distribution lists
User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint Options\Save\Save
files in this format (PowerPoint
Presentation (*.pptx) | PowerPoint
Macro-Enabled Presentation (*.pptm) |
PowerPoint 97-2003 Presentation
(*.ppt))


User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint
Options\Advanced\Number of
documents in the Recent Documents list
(0 - 50)
User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint
Options\Security\Determine whether to
force encrypted macros to be scanned
in Microsoft PowerPoint Open XML
presentations

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint Options\Security\Run
Programs (disable (don't run any
programs) | enable (prompt user before
running) | enable all (run without
prompting))


User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint Options\Security\Make
hidden markup visible

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint
Options\Security\Unblock automatic
download of linked images

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint Options\Security\Trust
Center\Disable all application add-ins
User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint Options\Security\Trust
Center\Require that application add-ins
are signed by Trusted Publisher

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint Options\Security\Trust
Center\Disable Trust Bar Notification for
unsigned application add-ins

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint Options\Security\Trust
Center\Trusted LocationsAllow Trusted
Locations not on the computer

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\PowerPoint Options\Security\Trust
Center\Trusted LocationsDisable all
trusted locations

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- Office Button | PowerPoint Options |
Customize | All Commands | Web Page
Preview

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- Office Button | Send | Email

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- Insert | Links | Hyperlink
User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- Review | Proofing | Language

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- View | Macros | Macros

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- Developer | Code | Macros

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- Developer | Code | Macro Security

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- Developer | Code | Visual Basic

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- Office Button | PowerPoint Options |
Customize | All Commands | Document
Location

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- Disable shortcut keys

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- Ctrl+K (Insert | Links | Hyperlink)
User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- Alt+F8 (Developer | Code | Macros)

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Disable items in user
interface\Predefined\Disable commands
- Alt+F11 (Developer | Code | Visual
Basic)
User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Block file formats\Open\Block
opening of pre-release versions of file
formats new to PowerPoint 2007


User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Block file formats\Open\Block
opening of Open Xml files types

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Block file formats\Open\Block
opening of Binary file types

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Block file formats\Open\Block
opening of Html file types

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Block file formats\Open\Block
opening of Outlines

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Block file formats\Open\Block
opening of Converters

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Block file formats\Save\Block
saving of Open Xml file types
User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Block file formats\Save\Block
saving of Binary file types

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Block file formats\Save\Block
saving of Html file types

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Block file formats\Save\Block
saving of Outlines

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Block file formats\Save\Block
saving of GraphicFilters

User Configuration\Administrative
Templates\Microsoft Office PowerPoint
2007\Block file
formats\Miscellaneous\Disable Slide
Update
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Display\Hidden text
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Save\Save files in
this format (Word document (*.docx) |
Single Files Web Page (*.mht) | Web
Page (*.htm; *.html) | Web Page,
Filtered (*.htm, *.html) | Rich Text
Format (*.rtf) | Plain Text (*.txt) | Word
6.0/95 (*.doc) | Word 6.0/95 - Chinese
(Simplified) (*.doc) | Word 6.0/95 -
Chinese (Traditional) (*.doc) | Word
6.0/95 - Japanese (*.doc) | Word 6.0/95 -
Korean (*.doc) | Word 97-2002 & 6.0/95 -
RTF | Word 5.1 for Macintosh (*.mcw) |
Word 5.0 for Macintosh (*.mcw) | Word
2.x for Windows (*.doc) | Works 4.0 for
Windows (*.wps) | WordPerfect 5.x for
Windows (*.doc) | WordPerfect 5.1 for
DOS (*.doc) | Word 2007 Macro
Enabled Document (*.docm) | Word
2007 Macro Free Template (*.dotx) |
Word 2007 Macro Enabled Template
(*.dotm) | Word 97 - 2003 Document
(*.doc) | Word 97 - 2003 Template
(*.dot) | Flat XML Document (*.xml))




User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Advanced\Number
of documents in the Recent Documents
list (0-50)

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Advanced\Update
automatic links at Open
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Advanced\E-mail
Options\Save smart tags in e-mail
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Security\Trust
Center\Determine whether to force
encrypted macros to be scanned in
Microsoft Word Open XML documents

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Security\Trust
Center\Disable all application add-ins

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Security\Trust
Center\Require that application add-ins
are signed by Trusted Publisher

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Security\Trust
Center\Disable Trust Bar Notification for
unsigned application add-ins

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Security\Trust
Center\Trusted LocationsAllow Trusted
Locations not on the computer

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Word Options\Security\Trust
Center\Trusted LocationsDisable all
trusted locations
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable commands

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable commands
- Office Button | Word Options |
Customize | All Commands | Save As
Web Page
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable commands
- Office Button | Word Options |
Customize | All Commands | Web Page
Preview
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable commands
- Office Button | Send | Email

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable commands
- Insert | Links | Hyperlink

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable commands
- Review | Protect | Protect Document

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable commands
- View | Macros | Macros

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable commands
- Developer | Code | Macros

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable commands
- Developer | Code | Record Macro

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable commands
- Developer | Code | Macro Security
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable commands
- Developer | Code | Visual Basic

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable commands
- Developer | Templates | Document
Template
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable shortcut
keys
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable shortcut
keys - Ctrl+F (Home | Editing | Find)

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable shortcut
keys - Ctrl+K (Insert | Links | Hyperlink)

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable shortcut
keys - Alt+F8 (Developer | Code |
Macros)
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Disable items in user
interface\Predefined\Disable shortcut
keys - Alt+F11 (Developer | Code |
Visual Basic)
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Open\Block
opening of pre-release versions of file
formats new to Word 2007

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Open\Block
opening of Open XML file types
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Open\Block
opening of Binary file types

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Open\Block
opening of HTML file types

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Open\Block
opening of Word 2003 XML file types

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Open\Block
opening of RTF file types

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Open\Block
open Converters

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Open\Block
opening of Text file types

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Open\Block
opening of Internal file types

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Open\Block
opening of files before version

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Save\Block
saving of Open XML file types

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Save\Block
saving of Binary file types
User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Save\Block
saving of HTML file types

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Save\Block
saving of Word 2003 XML file types

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Save\Block
saving of RTF file types

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Save\Block
saving of Converters

User Configuration\Administrative
Templates\Microsoft Office Word
2007\Block file formats\Save\Block
saving of Text file types


Computer Configuration\Administrative
Templates\Microsoft Office InfoPath
2007 (Machine)\Security\InfoPath
APTCA Assembly Whitelist


Computer Configuration\Administrative
Templates\Microsoft Office InfoPath
2007 (Machine)\Security\Windows
Internet Explorer Feature Control Opt-In
(None | InfoPath.exe, Document
Information Panel and Workflow forms |
InfoPath.exe, Document Information
Panel, Workflow forms and 3rd Party
Hosting)

Computer Configuration\Administrative
Templates\Microsoft Office InfoPath
2007 (Machine)\Security\InfoPath
APTCA Assembly Whitelist
Enforcement
Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\Disable
Package Repair

Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Disable user name and
password


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Disable user name and
password - excel.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Disable user name and
password - powerpnt.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Disable user name and
password - pptview.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Disable user name and
password - winword.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Disable user name and
password - outlook.exe
Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Disable user name and
password - spDesign.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Disable user name and
password - msaccess.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Bind to object


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Bind to object - excel.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Bind to object - powerpnt.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Bind to object - pptview.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Bind to object - winword.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Bind to object - outlook.exe
Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Bind to object - spDesign.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Bind to object - msaccess.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Saved from URL


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Saved from URL - excel.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Saved from URL -
powerpnt.exe

Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Saved from URL - pptview.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Saved from URL - winword.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Saved from URL - outlook.exe
Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Saved from URL -
spDesign.exe

Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Saved from URL -
msaccess.exe

Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Navigate URL


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Navigate URL - excel.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Navigate URL - powerpnt.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Navigate URL - pptview.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Navigate URL - winword.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Navigate URL - outlook.exe
Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Navigate URL - spDesign.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Navigate URL - msaccess.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Block popups


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Block popups - excel.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Block popups - powerpnt.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Block popups - pptview.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Block popups - winword.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Block popups - outlook.exe
Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Block popups - spDesign.exe


Computer Configuration\Administrative
Templates\Microsoft Office 2007 system
(Machine)\Security Settings\IE
Security\Block popups - msaccess.exe
 Outline      CCE Id    Old CCE ID                      CCE Definition


Internet
Explorer




                                       The "Security Zones: Use Only Machine
           CCE-5       CCE-Winv2.0-474 Settings" setting should be set correctly.




                                          Internet Explorer Processes (Restrict ActiveX
           CCE-119                        Install)
                          The "Security Zones: Do Not Allow Users to
                          Add/Delete Sites" setting should be set
CCE-146   CCE-Winv2.0-475 correctly.




                          The "Disable Periodic Check For Internet
                          Explorer Software Updates" setting should be
CCE-212   CCE-Winv2.0-478 set correctly.




                          The "Disable Automatic Install of Internet
                          Explorer Components" policy should be set
CCE-270   CCE-Winv2.0-480 correctly.




                            Internet Explorer Processes (Zone Elevation
CCE-347                     Protection)
                           The "Internet Explorer Processes (Consistent
                           MIME Handling)" setting should be set
CCE-382                    correctly.




                          The "Allow Software to Run or Install
                          Even if the Signature is Invalid" setting
CCE-449                   should be set correctly.
                          The "Disable Periodic Check for Internet
CCE-498   CCE-Winv2.0-481 Explorer Software Updates" policy should be
                          The "Internet Explorer Processes (MK
CCE-591                   Protocol)" setting should be set
                          The "Disable Software Update Shell
CCE-622   CCE-Winv2.0-479 Notifications on Program Launch" setting
                          The "Internet Explorer Processes (Restrict File
CCE-668                   Download)" setting should be set correctly.




                          The "Disable Automatic Install of
                          Internet Explorer Components" setting
CCE-684   CCE-Winv2.0-477 should be set correctly.
                          The "Make Proxy Settings Per-Machine
CCE-693   CCE-Winv2.0-476 (Rather Then Per-User)" setting should
                          The "Do Not Allow Users to enable or
CCE-708                   Disable Add-Ons" setting should be set
                           The "Turn Off Crash Detection" setting
CCE-753                    should be set Explorer Processes
                           The "Internet correctly.
                           (Scripted Window Security Restrictions)"
CCE-827                    setting should be set correctly.

                          The "Security Zones: Do Not Allow Users
                          to Change Policies" setting should be set
CCE-833   CCE-Winv2.0-473 correctly.




                           The "Internet Explorer Processes (MIME
CCE-985                    Sniffing)" setting should be set correctly.
           The "Check for Signature on Downloaded
           Programs" setting should be set
CCE-1025   correctly.




           The "Do Not Allow Resetting Internet
           Explorer Settings" setting should be set
CCE-42     correctly.




           The "Allow cut, copy, or paste operations
           from the clipboard via script" setting
CCE-49     should be set correctly.




           The "Turn Off First- Run Opt-In" setting
CCE-863    should be set correctly.




           The "Web Browser Applications" setting
CCE-286    should be set correctly.
           The "Allow cut, copy, or paste operations
           from the clipboard via script" setting
CCE-1031   should be set correctly.




           The "Turn Off First- Run Opt-In" setting
CCE-200    should be set correctly.




           The "Web Browser Applications" setting
CCE-51     should be set correctly.




           The "Intranet Sites: Include all network
           paths (UNCs)" setting should be set
CCE-876    correctly.




           The "Disable the Advanced Page" setting
CCE-810    should be set correctly.
          The "Disable the Privacy Page" setting
CCE-811   should be set correctly.




          The "Disable the Security Page" setting
CCE-595   should be set correctly.




          The "Prevent Ignoing Certificate Errors"
CCE-938   setting should be set correctly.




          The "Turn Off changing the URL to be
          displayed for checking updates to
          Internet Explorer and Internet Tools"
CCE-946   setting should be set correctly.




          The "Turn Off Configuring the Update
          Check Interval (In Days)" setting should
CCE-237   be set correctly.
          The "Add-on List" setting should be set
CCE-541   correctly.




          The "Deny all add-ons unless specifically
          allowed in the Add-on List" setting
CCE-911   should be set correctly.




          The "Disable "Configuring History""
CCE-66    setting should be set correctly.




          The "Disable Changing Automatic
          Configuration Settings" setting should be
CCE-471   set correctly.




          The "Disable Changing Connection
CCE-611   Settings" setting should be set correctly.
           The "Disable Changing Proxy Settings"
CCE-62     setting should be set correctly.




           The "Disable Showing the Splash
CCE-556    Screen" setting should be set correctly.




           The "Prevent "Fix settings" Functionality"
CCE-948    setting should be set correctly.




           The "Prevent participation in the
           Customer Experience Improvement
           Programs" setting should be set
CCE-495    correctly.




           The "Prevent performance of First Run
           Customize settings" setting should be
CCE-1006   set correctly.




           The "Pervent the deletation of temporary
           internet files and cookies" setting should
CCE-909    be set correctly.
           The "Turn off "Delete Browsing History"
           functionality" setting should be set
CCE-1010   correctly.




           The "Turn off Managing Phishing Filter"
CCE-1032   setting should be set correctly.




           The "Turn off the Security Settings
           Check feature" setting should be set
CCE-1054   correctly.




           The "Allow Active Content from CD's to
           Run on User Machine" setting should be
CCE-964    set correctly.




           The "Allow Software to Run or Install
           Even if the Signature is Invalid" setting
CCE-449    should be set correctly.
           The "Enable third-party browser
           extensions" setting should be set
CCE-598    correctly.




           The "Automatically Check for Internet
           Explorer Updates" setting should be set
CCE-1008   correctly.




           The "Check for Server Certificate
           Revocation" setting should be set
CCE-690    correctly.




           The "Access data sources across
CCE-47     domains" setting should be set correctly.




           The "Drag and drop or copy and paste
CCE-685    files" setting should be set correctly.
          The "Font download" setting should be
CCE-491   set correctly.




          The "Installation of desktop items"
CCE-355   setting should be set correctly.




          The "Allow script-initiated windows
          without size or position constraints"
CCE-280   setting should be set correctly.




          The "Allow Scriptlets" setting should be
CCE-439   set correctly.




          The "Allow status bar updates via script"
CCE-914   setting should be set correctly.
           The "Automatic prompting for file
           downloads" setting should be set
CCE-16     correctly.




           The "Download signed ActiveX controls"
CCE-1013   setting should be set correctly.




           The "Download unsigned ActiveX
CCE-176    controls" setting should be set correctly.




           The "Initialize and script ActiveX controls
           not marked as safe for scripting" setting
CCE-586    should be set correctly.




           The "Java permissions" setting should be
CCE-132    set correctly.
          The "Launching programs and files in an
CCE-689   IFRAME" setting should be set correctly.




          The "Logon" setting should be set
CCE-720   correctly.




          The "Loose XAML" setting should be set
CCE-126   correctly.




          The "Navigate sub-frames across
          different domains" setting should be set
CCE-245   correctly.




          The "Open files based on content, not
          file extension" setting should be set
CCE-910   correctly.
           The "Software channel permissions"
CCE-359    setting should be set correctly.




           The "Use Pop-up Blocker" setting should
CCE-1002   be set correctly.




           The "Userdata persistence" setting
CCE-425    should be set correctly.




           The "Web sites in less privileged Web
           content zones can navigate into this
CCE-724    zone" setting should be set correctly.




           The "XPS documents" setting should be
CCE-1015   set correctly.
          The "Display mixed content" setting
CCE-878   should be set correctly.




          The "Display mixed content" setting
CCE-288   should be set correctly.




          The "Display mixed content" setting
CCE-552   should be set correctly.




          The "Display mixed content" setting
CCE-473   should be set correctly.




          The "Display mixed content" setting
CCE-239   should be set correctly.
          The "Access data sources across
CCE-636   domains" setting should be set correctly.




          The "Active scripting" setting should be
CCE-292   set correctly.




          The "Binary and script behaviors" setting
CCE-178   should be set correctly.




          The "Drag and drop or copy and paste
CCE-41    files" setting should be set correctly.




          The "File download" setting should be
CCE-970   set correctly.
          The "Font download" setting should be
CCE-882   set correctly.




          The "Installation of desktop items"
CCE-763   setting should be set correctly.




          The "Allow META REFRESH" setting
CCE-680   should be set correctly.




          The "Allow script-initiated windows
          without size or position constraints"
CCE-208   setting should be set correctly.




          The "Allow Scriptlets" setting should be
CCE-838   set correctly.
           The "Allow status bar updates via script"
CCE-129    setting should be set correctly.




           The "Automatic prompting for file
           downloads" setting should be set
CCE-175    correctly.




           The "Download signed ActiveX controls"
CCE-52     setting should be set correctly.




           The "Download unsigned ActiveX
CCE-1012   controls" setting should be set correctly.




           The "Initialize and script ActiveX controls
           not marked as safe for scripting" setting
CCE-26     should be set correctly.
          The "Java permissions" setting should be
CCE-925   set correctly.




          The "Launching programs and files in an
CCE-339   IFRAME" setting should be set correctly.




          The "Logon" setting should be set
CCE-128   correctly.




          The "Loose XAML" setting should be set
CCE-639   correctly.




          The "Navigate sub-frames across
          different domains" setting should be set
CCE-995   correctly.
          The "Open files based on content, not
          file extension" setting should be set
CCE-409   correctly.




          The "Run components not signed with
          Authenticode" setting should be set
CCE-678   correctly.




          The "Run components signed with
          Authenticode" setting should be set
CCE-563   correctly.




          The "Run ActiveX controls and plugins"
CCE-841   setting should be set correctly.




          The "Script ActiveX controls marked safe
          for scripting" setting should be set
CCE-973   correctly.
           The "Scripting of Java applets" setting
CCE-1000   should be set correctly.




           The "Software channel permissions"
CCE-520    setting should be set correctly.




           The "Use Pop-up Blocker" setting should
CCE-660    be set correctly.




           The "Userdata persistence" setting
CCE-28     should be set correctly.




           The "Web sites in less privileged Web
           content zones can navigate into this
CCE-698    zone" setting should be set correctly.
          The "XPS documents" setting should be
CCE-460   set correctly.




          The "Display mixed content" setting
CCE-30    should be set correctly.




          The "Display mixed content" setting
CCE-31    should be set correctly.




          The "Display mixed content" setting
CCE-666   should be set correctly.




          The "Enable Native XMLHttp Support"
CCE-528   setting should be set correctly.
           The "Turn on the auto-complete feature
           for user names and passwords on form"
CCE-721    setting should be set correctly.
           The "Allow Install On Demand (Internet
           Explorer)" setting should be set
CCE-69     correctly.

           The "Turn off page transitions" setting
CCE-71     should be set correctly.




           The "Disable AutoComplete for forms"
CCE-478    setting should be set correctly.


           The "Disable Save this program to disk
CCE-412    option" setting should be set correctly.

           The "Disable changing certificate
CCE-1037   settings" setting should be set correctly.

           The "Disable external branding of
           Internet Explorer" setting should be set
CCE-1051   correctly.
           The "Configure Outlook Express" setting
CCE-963    should be set correctly
           The "Turn on the Internet Connection
           Wizard Auto Detect" setting should be
CCE-258    set correctly.

           The "Disable Internet Connection wizard"
CCE-769    setting should be set correctly.

           The "Disable the Reset Web Settings
CCE-625    feature" should be set correctly.
                                                                   NIST SCAP Microsoft
                                                                    Internet Exporer 7
      CCE Parameters      CCE Technical Mechanisms                         OVAL
                                                                  (SCAP-IE7-OVAL-Beta-
                                                                          v3.xml)


                        (1)
                       HKEY_LOCAL_MACHINE\Software\Policie
                       s\Microsoft\Windows\CurrentVersion\Intern
                       et Settings\Use_HKLM_only
                       Local Internet Options: GPO
                       Settings:[Computer Configuration | User
                       Configuration]/Network/Internet Explorer,
                       Registry Keys:[HKLM |
                       HKCU]\Software\Policies\Microsoft\Window
                       s\CurrentVersion\Internet
(1) enabled/disabled   Settings\Security_HKLM_only               oval:org.mitre.oval:def:1277




                       HKLM\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_R
                       ESTRICT_ACTIVEXINSTALL!(Reserved),
                       HKLM\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_R
                       ESTRICT_ACTIVEXINSTALL!explorer.exe,
                       HKLM\Software\Policies\
                       Local Internet Options: GPO
                       Settings:[Computer Configuration | User
                       Configuration]/Network/Internet
                       Explorer/Internet Control Panel/Security
                       Features/Restrict ActiveX Install, Registry
                       Keys:[HKLM |
                       HKCU]\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_R
                       ESTRICT_ACTIVEXINSTALL\(Reserved),
                       [HKLM |
                       HKCU]\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_R
                       ESTRICT_ACTIVEXINSTALL\explorer.exe,
                       [HKLM |
                       HKCU]\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_R
(1) enabled/disabled   ESTRICT_ACTIVEXINSTALL\iexplore.exe oval:org.mitre.oval:def:658
                        (1)
                       HKEY_LOCAL_MACHINE\Software\Policie
                       s\Microsoft\Windows\CurrentVersion\Intern
                       et Settings\Security_Zones_Map_Edit
                       Local Internet Options: GPO
                       Settings:[Computer Configuration | User
                       Configuration]/Network/Internet Explorer,
                       Registry Keys:[HKLM |
                       HKCU]\Software\Policies\Microsoft\Window
                       s\CurrentVersion\Internet
(1) enabled/disabled   Settings\Security_zones_map_edit          oval:org.mitre.oval:def:1400

                        (1)
                       HKEY_LOCAL_MACHINE\Software\Policie
                       s\Microsoft\Internet
                       Explorer\InfoDelivery\Restrictions\NoUpdate
                       Check
                       Local Internet Options: GPO
                       Settings:[Computer Configuration | User
                       Configuration]/Network/Internet Explorer,
                       Registry Keys:[HKLM |
                       HKCU]\Software\Policies\Microsoft\Internet
                       Explorer\Infodelivery\Restrictions\NoUpdate
(1) enabled/disabled   Check                                       oval:org.mitre.oval:def:1357




                        (1)
                       HKEY_LOCAL_MACHINE\Software\Policie
                       s\Microsoft\Internet
                       Explorer\InfoDelivery\Restrictions\NoJITSet
(1) enabled/disabled   up
                       HKLM\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_Z
                       ONE_ELEVATION!(Reserved),
                       HKLM\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_Z
                       ONE_ELEVATION!explorer.exe,
                       HKLM\Software\Policies\Microsoft\Internet,
enabled/disabled       Local Internet Options: GPO                oval:org.mitre.oval:def:620
                       HKLM\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_M
                       IME_HANDLING!(Reserved),
                       HKLM\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_M
                       IME_HANDLING!explorer.exe,
                       HKLM\Software\Policies\Microsoft\Internet
                       E,
                       Local Internet Options: GPO
                       Settings:[Computer Configuration | User
                       Configuration]/Network/Internet
                       Explorer/Internet Control Panel/Security
                       Features/Binary Behavior Security
                       Restriction, Registry Keys:[HKLM |
                       HKCU]\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_M
                       IME_HANDLING\(Reserved), [HKLM |
                       HKCU]\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_M
                       IME_HANDLING\explorer.exe, [HKLM |
                       HKCU]\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_M oval:org.mitre.oval:def:88
enabled/disabled       IME_HANDLING\iexplore.exe                  4


                       HKLM\Software\Policies\Microsoft\Internet
                       Explorer\Download!RunInvalidSignatures,
                       Local Internet Options: GPO
                       Settings:[Computer Configuration | User
                       Configuration]/Network/Internet
                       Explorer/Internet Control Panel/Advanced     oval:org.mitre.oval:def:68
                       Page , Registry Keys:[HKLM |                 0,
                       HKCU]\Software\Policies\Microsoft\Internet   oval:org.mitre.oval:def:13
enabled/disabled       Explorer\Download\RunInvalidSignatures       92
                       (1)
(1) enabled/disabled   HKEY_LOCAL_MACHINE\Software\Policie
                       HKLM\Software\Policies\Microsoft\Internet    oval:org.mitre.oval:def:61
(1) enabled/disabled   Explorer\Main\FeatureControl\FEATURE_D       7
                       (1)                                          oval:org.mitre.oval:def:11
(1) enabled/disabled   HKEY_LOCAL_MACHINE\Software\Micros           88
                               HKLM\Software\Policies\Microsoft\Internet
                               Explorer\Main\FeatureControl\FEATURE_R
                               ESTRICT_FILEDOWNLOAD!(Reserved),
                               HKLM\Software\Policies\Microsoft\Internet
                               Explorer\Main\FeatureControl\FEATURE_R
                               ESTRICT_FILEDOWNLOAD!explorer.exe,
                               Local Internet Options: GPO
                               Settings:[Computer Configuration | User
                               Configuration]/Network/Internet
                               Explorer/Internet Control Panel/Security
                               Features/Restrict File Download, Registry
                               Keys:[HKLM |
                               HKCU]\Software\Policies\Microsoft\Internet
                               Explorer\Main\FeatureControl\FEATURE_R
                               ESTRICT_FILEDOWNLOAD\(Reserved),
                               [HKLM |
                               HKCU]\Software\Policies\Microsoft\Internet
                               Explorer\Main\FeatureControl\FEATURE_R
                               ESTRICT_FILEDOWNLOAD\explorer.exe,
                               [HKLM |
                               HKCU]\Software\Policies\Microsoft\Internet
                               Explorer\Main\FeatureControl\FEATURE_R oval:org.mitre.oval:def:32
enabled/disabled               ESTRICT_FILEDOWNLOAD\iexplore.exe 0

                                (1)
                               HKEY_LOCAL_MACHINE\Software\Policie
                               s\Microsoft\Internet
                               Explorer\InfoDelivery\Restrictions\NoJITSet
                               up,
                               Local Internet Options: GPO
                               Settings:[Computer Configuration | User
                               Configuration]/Network/Internet Explorer,
                               Registry Keys:[HKLM |
                               HKCU]\Software\Policies\Microsoft\Internet
                               Explorer\Infodelivery\Restrictions\NoJITSetu   oval:org.mitre.oval:def:11
(1) enabled/disabled           p                                              98
                                (1)                                           oval:org.mitre.oval:def:11
(1) number of proxy settings   HKEY_LOCAL_MACHINE\Software\Policie            81
                               Local Internet Options: GPO                    oval:org.mitre.oval:def:13
enabled/disabled               Settings:[Computer Configuration |             80,
                       HKLM\Software\Policies\Microsoft\Internet
                       Explorer\Restrictions!NoCrashDetection,
                       Local Internet Options: GPO
                       Settings:[Computer Configuration | User
                       Configuration]/Network/Internet Explorer,
                       Registry Keys:[HKLM |
                       HKCU]\Software\Policies\Microsoft\Internet   oval:org.mitre.oval:def:48
enabled/disabled       Explorer\Restrictions\NoCrashDetection
                       HKLM\Software\Policies\Microsoft\Internet    7
                       Explorer\Main\FeatureControl\FEATURE_        oval:org.mitre.oval:def:46
enabled/disabled       WINDOW_RESTRICTIONS!(Reserved),
                       (1)                                          5
                       HKEY_LOCAL_MACHINE\Software\Policie
                       s\Microsoft\Windows\CurrentVersion\Intern
                       et Settings\Security_options_edit,        oval:org.mitre.oval:def:14
(1) enabled/disabled   Local Internet Options: GPO               04




                       HKLM\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_M
                       IME_SNIFFING!(Reserved),
                       HKLM\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_M
                       IME_SNIFFING!explorer.exe, Local Internet
                       Options: GPO Settings:[Computer
                       Configuration | User
                       Configuration]/Network/Internet
                       Explorer/Internet Control Panel/Security
                       Features/Mime Sniffing Safety Feature,
                       Registry Keys:[HKLM |
                       HKCU]\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_M
                       IME_SNIFFING\(Reserved), [HKLM |
                       HKCU]\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_M
                       IME_SNIFFING\explorer.exe, [HKLM |
                       HKCU]\Software\Policies\Microsoft\Internet
                       Explorer\Main\FeatureControl\FEATURE_M oval:org.mitre.oval:def:31
enabled/disabled       IME_SNIFFING\iexplore.exe                  7
                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Advanced Page , Registry
                   Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int
                   ernet
                   Explorer\Download\CheckExeSignatur oval:org.mitre.oval:def:39
enabled/disabled   es                                    5

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Advanced Page , Registry
                   Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int
                   ernet Explorer\Control                oval:org.mitre.oval:def:58
enabled/disabled   Panel\DisableRIED                     3


                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:50
                   Registry Keys:[HKLM |                  6,
                   HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:53
enabled/disabled   ndows\CurrentVersion\Internet Settin   3


                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Security Page/Internet Zone,
                   Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:11
enabled/disabled   ndows\CurrentVersion\Internet Settin 19


                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Security Page/Internet Zone,
                   Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:24
enabled/disabled   ndows\CurrentVersion\Internet Settin 2
                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Security Page/Restricted Sites    oval:org.mitre.oval:def:24
                   Zone, Registry Keys:[HKLM |             9,
                   HKCU]\Software\Policies\Microsoft\Wi    oval:org.mitre.oval:def:13
enabled/disabled   ndows\CurrentVersion\Interne            93

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Security Page/Restricted Sites
                   Zone, Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:62
enabled/disabled   ndows\CurrentVersion\Interne         1

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Security Page/Restricted Sites
                   Zone, Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:58
enabled/disabled   ndows\CurrentVersion\Interne         0

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Security Page, Registry
                   Keys:[HKLM |                            oval:org.mitre.oval:def:55
                   HKCU]\Software\Policies\Microsoft\Wi    9,
                   ndows\CurrentVersion\Internet           oval:org.mitre.oval:def:13
enabled/disabled   Settings\ZoneMap\UNC                    70

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control Panel,
                   Registry Keys:[HKLM |                   oval:org.mitre.oval:def:93
                   HKCU]\Software\Policies\Microsoft\Int   4,
                   ernet Explorer\Control                  oval:org.mitre.oval:def:66
enabled/disabled   Panel\AdvancedTab                       0
                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control Panel,
                   Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int
                   ernet Explorer\Control                oval:org.mitre.oval:def:11
enabled/disabled   Panel\PrivacyTab                      11

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control Panel,
                   Registry Keys:[HKLM |                   oval:org.mitre.oval:def:67
                   HKCU]\Software\Policies\Microsoft\Int   2,
                   ernet Explorer\Control                  oval:org.mitre.oval:def:60
enabled/disabled   Panel\SecurityTab                       1

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control Panel,
                   Registry Keys:[HKLM |                   oval:org.mitre.oval:def:65
                   HKCU]\Software\Policies\Microsoft\Wi    5,
                   ndows\CurrentVersion\Internet           oval:org.mitre.oval:def:11
enabled/disabled   Settings\PreventIgnoreCertErrors        29

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Internet Settings/Component
                   Updates/Periodic Check for Updates to
                   Internet Explorer and Internet Tools, oval:org.mitre.oval:def:71
enabled/disabled   Registry Keys:[HKLM                   5

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Internet Settings/Component
                   Updates/Periodic Check for Updates to
                   Internet Explorer and Internet Tools, oval:org.mitre.oval:def:11
enabled/disabled   Registry Keys:[HKLM                   87
                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Security Features/Add-on
                   Management, Registry Keys:[HKLM |
                   HKCU]\Software\Microsoft\Windows\C oval:org.mitre.oval:def:62
enabled/disabled   urrentVersion\Policies\Ext\Lis       6


                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Security Features/Add-on
                   Management, Registry Keys:[HKLM |
                   HKCU]\Software\Microsoft\Windows\C oval:org.mitre.oval:def:12
enabled/disabled   urrentVersion\Policies\Ext\Res       78

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer, Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int
                   ernet Explorer\Control Panel\History,   oval:org.mitre.oval:def:75
                   [HKLM |                                 7,
                   HKCU]\Software\Policies\Microsoft\Wi    oval:org.mitre.oval:def:13
enabled/disabled   ndow                                    65

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer, Registry Keys:[HKLM |         oval:org.mitre.oval:def:12
                   HKCU]\Software\Policies\Microsoft\Int   85,
                   ernet Explorer\Control                  oval:org.mitre.oval:def:61
enabled/disabled   Panel\Autoconfig                        3

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer, Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int   oval:org.mitre.oval:def:35
                   ernet Explorer\Control                  5,
                   Panel\Connection Settings, [HKLM |      oval:org.mitre.oval:def:11
enabled/disabled   HKCU]\Software\Policies\Micr            28
                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet    oval:org.mitre.oval:def:39
                   Explorer, Registry Keys:[HKLM |         8,
                   HKCU]\Software\Policies\Microsoft\Int   oval:org.mitre.oval:def:63
enabled/disabled   ernet Explorer\Control Panel\Proxy      5

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer, Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int
                   ernet
                   Explorer\Infodelivery\Restrictions\NoS oval:org.mitre.oval:def:11
enabled/disabled   plash                                  64

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer, Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int   oval:org.mitre.oval:def:44
                   ernet                                   8,
                   Explorer\Security\DisableFixSecurityS   oval:org.mitre.oval:def:64
enabled/disabled   ettings                                 0

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer, Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int   oval:org.mitre.oval:def:11
                   ernet                                   71,
                   Explorer\SQM\DisableCustomerImpro       oval:org.mitre.oval:def:13
enabled/disabled   vementProgram                           91

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer, Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int
                   ernet
                   Explorer\Main\DisableFirstRunCustomi oval:org.mitre.oval:def:13
enabled/disabled   ze                                    22


                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet    oval:org.mitre.oval:def:13
                   Explorer, Registry Keys:[HKLM |         82,
                   HKCU]\Software\Policies\Microsoft\Int   oval:org.mitre.oval:def:70
enabled/disabled   ernet Explorer\Control Panel\Settings   3
                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer, Registry Keys:[HKLM |          oval:org.mitre.oval:def:45
                   HKCU]\Software\Policies\Microsoft\Int    8,
                   ernet Explorer\Control                   oval:org.mitre.oval:def:14
enabled/disabled   Panel\DisableDeleteBrowsingHistory       74


                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer, Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int oval:org.mitre.oval:def:50
enabled/disabled   ernet Explorer\PhishingFilter\Enabled 1

                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer, Registry Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int    oval:org.mitre.oval:def:91
                   ernet                                    6,
                   Explorer\Security\DisableSecuritySetti   oval:org.mitre.oval:def:10
enabled/disabled   ngsCheck                                 34
                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Advanced Page , Registry
                   Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int
                   ernet
                   Explorer\Main\FeatureControl\FEATUR oval:org.mitre.oval:def:40
enabled/disabled   E_LOCAL                               0
                   Local Internet Options: GPO
                   Settings:[Computer Configuration |
                   User Configuration]/Network/Internet
                   Explorer/Internet Control
                   Panel/Advanced Page , Registry
                   Keys:[HKLM |
                   HKCU]\Software\Policies\Microsoft\Int    oval:org.mitre.oval:def:68
                   ernet                                    0,
                   Explorer\Download\RunInvalidSignatu      oval:org.mitre.oval:def:13
enabled/disabled   res                                      92
                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Advanced Page , Registry
                          Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Int
                          ernet Explorer\Main\Enable Browser    oval:org.mitre.oval:def:11
enabled/disabled          Extensions                            0


                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Advanced Page , Registry          oval:org.mitre.oval:def:65
                          Keys:[HKLM |                            6,
                          HKCU]\Software\Policies\Microsoft\Int   oval:org.mitre.oval:def:13
enabled/disabled          ernet Explorer\Main\NoUpdateCheck       60

                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Advanced Page , Registry
                          Keys:[HKLM |                            oval:org.mitre.oval:def:17
                          HKCU]\Software\Policies\Microsoft\Wi    2,
                          ndows\CurrentVersion\Internet           oval:org.mitre.oval:def:15
enabled/disabled          Settings\Certificat                     02


                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Internet Zone,      oval:org.mitre.oval:def:67
                          Registry Keys:[HKLM |                   4,
                          HKCU]\Software\Policies\Microsoft\Wi    oval:org.mitre.oval:def:65
enabled/disabled/prompt   ndows\CurrentVersion\Internet Settin    0


                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Internet Zone,      oval:org.mitre.oval:def:10
                          Registry Keys:[HKLM |                   83,
                          HKCU]\Software\Policies\Microsoft\Wi    oval:org.mitre.oval:def:54
enabled/disabled/prompt   ndows\CurrentVersion\Internet Settin    7
                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:52
                          Registry Keys:[HKLM |                  4,
                          HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:65
enabled/disabled/prompt   ndows\CurrentVersion\Internet Settin   9


                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:22
                          Registry Keys:[HKLM |                  3,
                          HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:54
enabled/disabled/prompt   ndows\CurrentVersion\Internet Settin   1


                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:58
                          Registry Keys:[HKLM |                  9,
                          HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:14
enabled/disabled          ndows\CurrentVersion\Internet Settin   76


                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Internet Zone,
                          Registry Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:10
enabled/disabled/prompt   ndows\CurrentVersion\Internet Settin 43


                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:22
                          Registry Keys:[HKLM |                  6,
                          HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:12
enabled/disabled          ndows\CurrentVersion\Internet Settin   08
                           Local Internet Options: GPO
                           Settings:[Computer Configuration |
                           User Configuration]/Network/Internet
                           Explorer/Internet Control
                           Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:11
                           Registry Keys:[HKLM |                  13,
                           HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:56
enabled/disabled           ndows\CurrentVersion\Internet Settin   2


                           Local Internet Options: GPO
                           Settings:[Computer Configuration |
                           User Configuration]/Network/Internet
                           Explorer/Internet Control
                           Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:11
                           Registry Keys:[HKLM |                  99,
                           HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:54
enabled/disabled/prompt    ndows\CurrentVersion\Internet Settin   6


                           Local Internet Options: GPO
                           Settings:[Computer Configuration |
                           User Configuration]/Network/Internet
                           Explorer/Internet Control
                           Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:39
                           Registry Keys:[HKLM |                  1,
                           HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:12
enabled/disabled/prompt    ndows\CurrentVersion\Internet Settin   00


                           Local Internet Options: GPO
                           Settings:[Computer Configuration |
                           User Configuration]/Network/Internet
                           Explorer/Internet Control
                           Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:10
                           Registry Keys:[HKLM |                  40,
                           HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:73
enabled/disabled/prompt    ndows\CurrentVersion\Internet Settin   9


                           Local Internet Options: GPO
                           Settings:[Computer Configuration |
                           User Configuration]/Network/Internet
                           Explorer/Internet Control
                           Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:11
Custom/Disable Java/High   Registry Keys:[HKLM |                  74,
safety/Low safety/Medium   HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:72
safety                     ndows\CurrentVersion\Internet Settin   5
                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:61
                            Registry Keys:[HKLM |                  1,
                            HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:14
enabled/disabled/prompt     ndows\CurrentVersion\Internet Settin   87


                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
Anonymous logon/Automatic   User Configuration]/Network/Internet
logon only in Intranet      Explorer/Internet Control
zone/Automatic logon with   Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:69
current user name and       Registry Keys:[HKLM |                  1,
password/Prompt for user    HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:11
name and password           ndows\CurrentVersion\Internet Settin   23


                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Internet Zone,
                            Registry Keys:[HKLM |
                            HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:24
enabled/disabled/prompt     ndows\CurrentVersion\Internet Settin 0


                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:61
                            Registry Keys:[HKLM |                  2,
                            HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:13
enabled/disabled/prompt     ndows\CurrentVersion\Internet Settin   94


                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:95
                            Registry Keys:[HKLM |                  3,
                            HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:13
enabled/disabled            ndows\CurrentVersion\Internet Settin   00
                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:30
                              Registry Keys:[HKLM |                  2,
High safety/low safety/medium HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:13
safety                        ndows\CurrentVersion\Internet Settin   98


                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:11
                              Registry Keys:[HKLM |                  79,
                              HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:55
enabled/disabled              ndows\CurrentVersion\Internet Settin   8


                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Internet Zone,
                              Registry Keys:[HKLM |
                              HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:11
enabled/disabled              ndows\CurrentVersion\Internet Settin 08


                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Internet Zone,     oval:org.mitre.oval:def:26
                              Registry Keys:[HKLM |                  5,
                              HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:14
enabled/disabled/prompt       ndows\CurrentVersion\Internet Settin   32


                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Internet Zone,
                              Registry Keys:[HKLM |
                              HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:62
enabled/disabled/prompt       ndows\CurrentVersion\Internet Settin 8
                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Locked-Down
                          Internet Zone, Registry Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:24
enabled/disabled/prompt   ndows\CurrentVersion\Int             5


                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Intranet Zone,
                          Registry Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:11
enabled/disabled/prompt   ndows\CurrentVersion\Internet Settin 66


                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Locked-Down
                          Intranet Zone, Registry Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:24
enabled/disabled/prompt   ndows\CurrentVersion\Int             7

                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Local Machine
                          Zone, Registry Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:38
enabled/disabled/prompt   ndows\CurrentVersion\Internet S      3
                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Locked-Down
                          Local Machine Zone, Registry
                          Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:41
enabled/disabled/prompt   ndows\CurrentVersio                  8
                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:65
                            Zone, Registry Keys:[HKLM |            2,
                            HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:75
enabled/disabled/prompt     ndows\CurrentVersion\Interne           0

                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:29
                            Zone, Registry Keys:[HKLM |            3,
                            HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:56
enabled/disabled/prompt     ndows\CurrentVersion\Interne           1

                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:36
                            Zone, Registry Keys:[HKLM |            5,
Administrator               HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:13
approved/enabled/disabled   ndows\CurrentVersion\Interne           14

                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:49
                            Zone, Registry Keys:[HKLM |            8,
                            HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:14
enabled/disabled/prompt     ndows\CurrentVersion\Interne           65

                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:11
                            Zone, Registry Keys:[HKLM |            84,
                            HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:13
enabled/disabled            ndows\CurrentVersion\Interne           18
                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:11
                          Zone, Registry Keys:[HKLM |            09,
                          HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:14
enabled/disabled/prompt   ndows\CurrentVersion\Interne           10

                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:25
                          Zone, Registry Keys:[HKLM |            1,
                          HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:12
enabled/disabled/prompt   ndows\CurrentVersion\Interne           57

                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:12
                          Zone, Registry Keys:[HKLM |            18,
                          HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:12
enabled/disabled          ndows\CurrentVersion\Interne           70


                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:12
                          Zone, Registry Keys:[HKLM |            34,
                          HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:57
enabled/disabled          ndows\CurrentVersion\Interne           4

                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Restricted Sites
                          Zone, Registry Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:12
enabled/disabled/prompt   ndows\CurrentVersion\Interne         17
                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Restricted Sites
                          Zone, Registry Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:37
enabled/disabled          ndows\CurrentVersion\Interne         8

                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:25
                          Zone, Registry Keys:[HKLM |            2,
                          HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:13
enabled/disabled          ndows\CurrentVersion\Interne           12

                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:10
                          Zone, Registry Keys:[HKLM |            19,
                          HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:13
enabled/disabled/prompt   ndows\CurrentVersion\Interne           89

                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:94
                          Zone, Registry Keys:[HKLM |            9,
                          HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:57
enabled/disabled/prompt   ndows\CurrentVersion\Interne           9

                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:27
                          Zone, Registry Keys:[HKLM |            3,
                          HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:13
enabled/disabled/prompt   ndows\CurrentVersion\Interne           42
                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:82
Custom/Disable Java/High    Zone, Registry Keys:[HKLM |            4,
safety/Low safety/Medium    HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:73
safety                      ndows\CurrentVersion\Interne           2

                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:27
                            Zone, Registry Keys:[HKLM |            4,
                            HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:12
enabled/disabled/prompt     ndows\CurrentVersion\Interne           23

                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
Anonymous logon/Automatic   User Configuration]/Network/Internet
logon only in Intranet      Explorer/Internet Control
zone/Automatic logon with   Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:32
current user name and       Zone, Registry Keys:[HKLM |            6,
password/Prompt for user    HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:13
name and password           ndows\CurrentVersion\Interne           78

                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Restricted Sites
                            Zone, Registry Keys:[HKLM |
                            HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:27
enabled/disabled/prompt     ndows\CurrentVersion\Interne         5


                            Local Internet Options: GPO
                            Settings:[Computer Configuration |
                            User Configuration]/Network/Internet
                            Explorer/Internet Control
                            Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:12
                            Zone, Registry Keys:[HKLM |            29,
                            HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:12
enabled/disabled/prompt     ndows\CurrentVersion\Interne           92
                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:70
                              Zone, Registry Keys:[HKLM |            6,
                              HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:14
enabled/disabled              ndows\CurrentVersion\Interne           21


                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:32
                              Zone, Registry Keys:[HKLM |            9,
                              HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:59
enabled/disabled/prompt       ndows\CurrentVersion\Interne           9


                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:27
                              Zone, Registry Keys:[HKLM |            6,
                              HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:14
enabled/disabled/prompt       ndows\CurrentVersion\Interne           28

                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:57
Administrator                 Zone, Registry Keys:[HKLM |            1,
approved/enabled/disabled/pro HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:15
mpt                           ndows\CurrentVersion\Interne           94

                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:60
                              Zone, Registry Keys:[HKLM |            2,
                              HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:12
enabled/disabled/prompt       ndows\CurrentVersion\Interne           74
                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:28
                              Zone, Registry Keys:[HKLM |            0,
                              HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:64
enabled/disabled/prompt       ndows\CurrentVersion\Interne           1

                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:29
                              Zone, Registry Keys:[HKLM |            0,
High safety/low safety/medium HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:12
safety                        ndows\CurrentVersion\Interne           14

                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:11
                              Zone, Registry Keys:[HKLM |            00,
                              HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:12
enabled/disabled              ndows\CurrentVersion\Interne           86

                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Restricted Sites
                              Zone, Registry Keys:[HKLM |
                              HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:30
enabled/disabled              ndows\CurrentVersion\Interne         0


                              Local Internet Options: GPO
                              Settings:[Computer Configuration |
                              User Configuration]/Network/Internet
                              Explorer/Internet Control
                              Panel/Security Page/Restricted Sites   oval:org.mitre.oval:def:12
                              Zone, Registry Keys:[HKLM |            19,
                              HKCU]\Software\Policies\Microsoft\Wi   oval:org.mitre.oval:def:12
enabled/disabled/prompt       ndows\CurrentVersion\Interne           43
                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Restricted Sites
                          Zone, Registry Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:11
enabled/disabled/prompt   ndows\CurrentVersion\Interne         76
                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Locked-Down
                          Restricted Sites Zone, Registry
                          Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:31
enabled/disabled/prompt   ndows\CurrentVer                     4

                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Trusted Sites
                          Zone, Registry Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:11
enabled/disabled/prompt   ndows\CurrentVersion\Internet S      53

                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Page/Locked-Down
                          Trusted Sites Zone, Registry
                          Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Wi oval:org.mitre.oval:def:11
enabled/disabled/prompt   ndows\CurrentVersio                  83

                          Local Internet Options: GPO
                          Settings:[Computer Configuration |
                          User Configuration]/Network/Internet
                          Explorer/Internet Control
                          Panel/Security Features, Registry
                          Keys:[HKLM |
                          HKCU]\Software\Policies\Microsoft\Int oval:org.mitre.oval:def:33
enabled/disabled          ernet Explorer\Main\XMLHTTP           8
                   HKCU\Software\Policies\Microsoft\Inte
                   rnet Explorer\Main!FormSuggest
                   Passwords,
                   HKCU\Software\Policies\Microsoft\Inte
                   rnet Explorer\Control
enabled/disabled   Panel!FormSuggest Passwords           oval:org.mitre.oval:def:645

                   HKCU\Software\Policies\Microsoft\Inte
enabled/disabled   rnet Explorer\Main!NoJITSetup         oval:org.mitre.oval:def:523

                   HKCU\Software\Policies\Microsoft\Inte
enabled/disabled   rnet Explorer\Main!Page_Transitions   oval:org.mitre.oval:def:1206

                   HKCU\Software\Policies\Microsoft\Inte
                   rnet Explorer\Main!Use FormSuggest,
                   HKCU\Software\Policies\Microsoft\Inte
                   rnet Explorer\Control
enabled/disabled   Panel!FormSuggest                       oval:org.mitre.oval:def:1516
                   HKCU\Software\Policies\Microsoft\Inte
                   rnet
                   Explorer\Restrictions!NoSelectDownlo
enabled/disabled   adDir                                   oval:org.mitre.oval:def:505
                   HKCU\Software\Policies\Microsoft\Inte
                   rnet Explorer\Control
enabled/disabled   Panel!Certificates                      oval:org.mitre.oval:def:1362
                   HKCU\Software\Policies\Microsoft\Inte
                   rnet
                   Explorer\Restrictions!NoExternalBrand
enabled/disabled   ing                                     oval:org.mitre.oval:def:1384
                   HKCU\Software\Microsoft\Outlook
enabled/disabled   Express!BlockExeAttachments             oval:org.mitre.oval:def:1238

                   HKCU\Software\Policies\Microsoft\Inte
enabled/disabled   rnet Connection Wizard!DisableICW     oval:org.mitre.oval:def:604
                   HKCU\Software\Policies\Microsoft\Inte
                   rnet Explorer\Control Panel!Connwiz
enabled/disabled   Admin Lock                            oval:org.mitre.oval:def:1355
                   HKCU\Software\Policies\Microsoft\Inte
                   rnet Explorer\Control
enabled/disabled   Panel!ResetWebSettings                oval:org.mitre.oval:def:1437
 NIST SCAP Microsoft
   Internet Exporer 7
  XCCDF (SCAP-IE7-
  XCCDF-Beta-v3.xml




UseOnlyMachineSettings-
LocalComputer




IEProcesses-
RestrictActiveXInstall-
LocalComputer
DoNotAllowUsersAddDeleteS
ites-LocalComputer




DisablePeriodicCheckForIES
oftwareUpdates-
LocalComputer
IEProcesses-
ConsistentMimeHandling-
LocalComputer




AllowSoftwareRunInstallS
ignatureInvalid-
LocalComputer,
AllowSoftwareToRununOr
InstallEvenIfSignatureInv
alid-LocalUser


IEProcesses-
MKProtocolSecurityRestric
DisableSoftwareUpdateSh
ellNotifications-
IEProcesses-
RestrictFileDownload-
LocalComputer




DisableAutomaticInstallOf
IEComponents-
LocalComputer
MakeProxySettingsPerMac
hine-LocalComputer
DoNotAllowUsersEnableDi
sableAddOns-
TurnOffCrashDetection-
LocalComputer
IEProcesses-
ScriptedWindowSecurityR
estrictions-LocalComputer



DoNotAllowUsersChangeP
olicies-LocalComputer




IEProcesses-
MimeSniffingSafetyFeatur
e-LocalComputer
CheckSignatureDownload
edPrograms-
LocalComputer




DoNotAllowResettingIESe
ttings-LocalComputer


AllowCutCopyPasteOperat
ionsFromClipboardViaScri
pt-InternetZone-
LocalComputer,
AllowCutCopyPasteOperat
ionsFromClipboardViaScri
pt-InternetZone-
LocalUser




TurnOffFirst-RunOpt-In-
InternetZone-
LocalComputer




WebBrowserApplications-
InternetZone-
LocalComputer
AllowCutCopyPasteOperat
ionsFromClipboardViaScri
pt-RestrictedSitesZone-
LocalComputer,
AllowCutCopyPasteOperat
ionsFromClipboardViaScri
pt-RestrictedSitesZone-
LocalUser




TurnOffFirst-RunOpt-In-
RestrictedSitesZone-
LocalComputer




WebBrowserApplications-
RestrictedSitesZone-
LocalComputer




IncludeAllNetworkPaths-
LocalComputer,
IncludeAllNetworkPaths-
LocalUser




DisableTheAdvancedPage-
LocalComputer,
DisableTheAdvancedPage-
LocalUser
DisableThePrivacyPage-
LocalComputer




DisableTheSecurityPage-
LocalComputer,
DisableTheSecurityPage-
LocalUser




PreventIgnoingCertificate
Errors-LocalComputer,
PreventIgnoingCertificate
Errors-LocalUser




TurnOffChangingURLDispl
ay-LocalComputer




TurnOffConfiguringUpdate
CheckInterval-
LocalComputer
AddOnList-LocalComputer




DenyAllAddOns-
LocalComputer




DisableConfiguringHistory-
LocalComputer,
DisableConfiguringHistory-
LocalUser


DisableChangingAutomati
cConfigurationSettings-
LocalComputer,
DisableChangingAutomati
cConfigurationSettings-
LocalUser




DisableChangingConnecti
onSettings-
LocalComputer,
DisableChangingConnecti
onSettings-LocalUser
DisableChangingProxySet
tings-LocalComputer,
DisableChangingProxySet
tings-LocalUser




DisableShowingSplashScr
een-LocalComputer




PreventFixSettingsFunctio
nality-LocalComputer,
PreventFixSettingsFunctio
nality-LocalUser


PreventParticipationInCus
tomerExperienceImprove
mentPrograms-
LocalComputer,
PreventParticipationInCus
tomerExperienceImprove
mentPrograms-LocalUser




PreventPerformanceOfFirs
tRunCustomizeSettings-
LocalComputer



PerventDeletationOfTemp
InternetFiles-
LocalComputer,
PerventDeletationOfTemp
InternetFiles-LocalUser
TurnOffDeleteBrowsingHis
toryFunctionality-
LocalComputer,
TurnOffDeleteBrowsingHis
toryFunctionality-
LocalUser




TurnOffManagingPhishing
Filter-LocalComputer




TurnOffSecuritySettingsC
heckFeature-
LocalComputer,
TurnOffSecuritySettingsC
heckFeature-LocalUser




AllowActiveContentFromC
D-LocalComputer




AllowSoftwareRunInstallS
ignatureInvalid-
LocalComputer,
AllowSoftwareToRununOr
InstallEvenIfSignatureInv
alid-LocalUser
AllowThird-
PartyBrowserExtensions-
LocalComputer




AutomaticallyCheckIEUpd
ates-LocalComputer,
AutomaticallyCheckForIE
Updates-LocalUser




CheckServerCertificateRe
vocation-LocalComputer,
CheckForServerCertificate
Revocation-LocalUser




AccessDataSourcesAcross
Domains-InternetZone-
LocalComputer,
AccessDataSourcesAcross
Domains-InternetZone-
LocalUser




AllowDragDropOrCopyPas
teFiles-InternetZone-
LocalComputer,
AllowDragDropOrCopyPas
teFiles-InternetZone-
LocalUser
AllowFontDownloads-
InternetZone-
LocalComputer,
AllowFontDownloads-
InternetZone-LocalUser




AllowInstallationOfDeskto
pItems-InternetZone-
LocalComputer,
AllowInstallationOfDeskto
pItems-InternetZone-
LocalUser


AllowScriptInitiatedWindo
wsWithoutSizeOrPosition
Constraints-InternetZone-
LocalComputer,
AllowScriptInitiatedWindo
wsWithoutSizeOrPosition
Constraints-InternetZone-
LocalUser




AllowScriptlets-
InternetZone-
LocalComputer




AllowStatusBarUpdatesVi
aScript-InternetZone-
LocalComputer,
AllowStatusBarUpdatesVi
aScript-InternetZone-
LocalUser
AutomaticPromptingFileD
ownloads-InternetZone-
LocalComputer,
AutomaticPromptingFileD
ownloads-InternetZone-
LocalUser




DownloadSignedActiveXC
ontrols-InternetZone-
LocalComputer,
DownloadSignedActiveXC
ontrols-InternetZone-
LocalUser




DownloadUnsignedActive
XControls-InternetZone-
LocalComputer,
DownloadUnsignedActive
XControls-InternetZone-
LocalUser
InitializeScriptActiveXCon
trolsNotMarkedAsSafe-
InternetZone-
LocalComputer,
JavaPermissions-
InternetZone-
LocalComputer,
InitializeScriptActiveXCon
trolsNotMarkedAsSafe-
InternetZone-LocalUser




JavaPermissions-
InternetZone-LocalUser
LaunchingApplicationsAnd
FilesInIFRAME-
InternetZone-
LocalComputer,
LaunchingApplicationsAnd
FilesInIFRAME-
InternetZone-LocalUser




LogonOptions-
InternetZone-
LocalComputer,
LogonOptions-
InternetZone-LocalUser




LooseXAMLFiles-
InternetZone-
LocalComputer


NavigateSub-
framesAcrossDifferentDo
mains-InternetZone-
LocalComputer,
NavigateSub-
framesAcrossDifferentDo
mains-InternetZone-
LocalUser




OpenFilesBasedOnConten
t-InternetZone-
LocalComputer,
OpenFilesBasedOnConten
t-InternetZone-LocalUser
SoftwareChannelPermissi
ons-InternetZone-
LocalComputer,
SoftwareChannelPermissi
ons-InternetZone-
LocalUser




UsePop-upBlocker-
InternetZone-
LocalComputer, UsePop-
upBlocker-InternetZone-
LocalUser




UserdataPersistence-
InternetZone-
LocalComputer
WebSitesInLessPrivileged
WebContentZonesCanNav
igateIntoThisZone-
InternetZone-
LocalComputer,
WebSitesInLessPrivileged
WebContentZonesCanNav
igateIntoThisZone-
InternetZone-LocalUser




XPSFiles-InternetZone-
LocalComputer
DisplayMixedContent-
LockedDownInternetZone-
LocalComputer




DisplayMixedContent-
IntranetZone-
LocalComputer




DisplayMixedContent-
LockedDownIntranetZone-
LocalComputer




DisplayMixedContent-
LocalMachineZone-
LocalComputer




DisplayMixedContent-
LockedDownLocalMachine
Zone-LocalComputer
AccessDataSourcesAcross
Domains-
RestrictedSitesZone-
LocalComputer,
AccessDataSourcesAcross
Domains-
RestrictedSitesZone-
LocalUser



AllowActiveScripting-
RestrictedSitesZone-
LocalComputer,
AllowActiveScripting-
RestrictedSitesZone-
LocalUser

AllowBinaryAndScriptBeh
aviors-
RestrictedSitesZone-
LocalComputer,
AllowBinaryAndScriptBeh
aviors-
RestrictedSitesZone-
LocalUser

AllowDragDropOrCopyPas
teFiles-
RestrictedSitesZone-
LocalComputer,
AllowDragDropOrCopyPas
teFiles-
RestrictedSitesZone-
LocalUser



AllowFileDownloads-
RestrictedSitesZone-
LocalComputer,
AllowFileDownloads-
RestrictedSitesZone-
LocalUser
AllowFontDownloads-
RestrictedSitesZone-
LocalComputer,
AllowFontDownloads-
RestrictedSitesZone-
LocalUser

AllowInstallationOfDeskto
pItems-
RestrictedSitesZone-
LocalComputer,
AllowInstallationOfDeskto
pItems-
RestrictedSitesZone-
LocalUser



AllowMETAREFRESH-
RestrictedSitesZone-
LocalComputer,
AllowMETAREFRESH-
RestrictedSitesZone-
LocalUser
AllowScriptInitiatedWindo
wsWithoutSizeOrPosition
Constraints-
RestrictedSitesZone-
LocalComputer,
AllowScriptInitiatedWindo
wsWithoutSizeOrPosition
Constraints-
RestrictedSitesZone-
LocalUser




AllowScriptlets-
RestrictedSitesZone-
LocalComputer
AllowStatusBarUpdatesVi
aScript-
RestrictedSitesZone-
LocalComputer

AutomaticPromptingFileD
ownloads-
RestrictedSitesZone-
LocalComputer,
AutomaticPromptingFileD
ownloads-
RestrictedSitesZone-
LocalUser

DownloadSignedActiveXC
ontrols-
RestrictedSitesZone-
LocalComputer,
DownloadSignedActiveXC
ontrols-
RestrictedSitesZone-
LocalUser

DownloadUnsignedActive
XControls-
RestrictedSitesZone-
LocalComputer,
DownloadUnsignedActive
XControls-
RestrictedSitesZone-
LocalUser

InitializeScriptActiveXCon
trolsNotMarkedAsSafe-
RestrictedSitesZone-
LocalComputer,
InitializeScriptActiveXCon
trolsNotMarkedAsSafe-
RestrictedSitesZone-
LocalUser
JavaPermissions-
RestrictedSitesZone-
LocalComputer,
JavaPermissions-
RestrictedSitesZone-
LocalUser

LaunchingApplicationsAnd
FilesInIFRAME-
RestrictedSitesZone-
LocalComputer,
LaunchingApplicationsAnd
FilesInIFRAME-
RestrictedSitesZone-
LocalUser



LogonOptions-
RestrictedSitesZone-
LocalComputer,
LogonOptions-
RestrictedSitesZone-
LocalUser




LooseXAMLFiles-
RestrictedSitesZone-
LocalComputer
NavigateSub-
framesAcrossDifferentDo
mains-
RestrictedSitesZone-
LocalComputer,
NavigateSub-
framesAcrossDifferentDo
mains-
RestrictedSitesZone-
LocalUser
OpenFilesBasedOnConten
t-RestrictedSitesZone-
LocalComputer,
OpenFilesBasedOnConten
t-RestrictedSitesZone-
LocalUser
RunNETFrameworkReliant
ComponentsNotSignedWit
hAuthenticode-
RestrictedSitesZone-
LocalComputer,
RunNETFrameworkReliant
ComponentsNotSignedWit
hAuthenticode-
RestrictedSitesZone-
LocalUser
RunNETFrameworkReliant
ComponentsSignedWithA
uthenticode-
RestrictedSitesZone-
LocalComputer,
RunNETFrameworkReliant
ComponentsSignedWithA
uthenticode-
RestrictedSitesZone-
LocalUser

RunActiveXControlsAndPl
ugins-
RestrictedSitesZone-
LocalComputer,
RunActiveXControlsAndPl
ugins-
RestrictedSitesZone-
LocalUser

ScriptActiveXControlsMar
kedSafeForScripting-
RestrictedSitesZone-
LocalComputer,
ScriptActiveXControlsMar
kedSafeForScripting-
RestrictedSitesZone-
LocalUser
ScriptingOfJavaApplets-
RestrictedSitesZone-
LocalComputer,
ScriptingOfJavaApplets-
RestrictedSitesZone-
LocalUser



SoftwareChannelPermissi
ons-RestrictedSitesZone-
LocalComputer,
SoftwareChannelPermissi
ons-RestrictedSitesZone-
LocalUser



UsePop-upBlocker-
RestrictedSitesZone-
LocalComputer, UsePop-
upBlocker-
RestrictedSitesZone-
LocalUser




UserdataPersistence-
RestrictedSitesZone-
LocalComputer
WebSitesInLessPrivileged
WebContentZonesCanNav
igateIntoThisZone-
RestrictedSitesZone-
LocalComputer,
WebSitesInLessPrivileged
WebContentZonesCanNav
igateIntoThisZone-
RestrictedSitesZone-
LocalUser
XPSFiles-
RestrictedSitesZone-
LocalComputer




DisplayMixedContent-
LockedDownRestrictedSit
esZone-LocalComputer




DisplayMixedContent-
TrustedSitesZone-
LocalComputer




DisplayMixedContent-
LockedDownTrustedSites
Zone-LocalComputer




EnableNativeXMLHttpSup
port-LocalComputer
DisableSaveThisProgramToDiskOption-LocalUser


AllowInstallOnDemandIE-LocalUser


TurnOffPageTransitions-LocalUser




DisableAutoCompleteForForms-LocalUser



AllowInstallOnDemandIE-LocalUser


DisableChangingCertificateSettings-LocalUser



DisableExternalBrandingOfIE-LocalUser

ConfigureOutlookExpress-LocalUser


InternetConnectionWizardSettings-LocalUser


DisableInternetConnectionWizard-LocalUser


DisableResetWebSettingsFeature-LocalUser

				
DOCUMENT INFO
Description: Microsoft Office Templates Online document sample