CIS Microsoft Office Outlook 2013 Benchmark
Total Page:16
File Type:pdf, Size:1020Kb
CIS Microsoft Office Outlook 2013 Benchmarkv1.1.0 - 09-30-2016 This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International Public License. The link to the license terms can be found at https://creativecommons.org/licenses/by-nc-sa/4.0/legalcode To further clarify the Creative Commons license related to CIS Benchmark content, you are authorized to copy and redistribute the content for use by you, within your organization and outside your organization for non-commercial purposes only, provided that (i) appropriate credit is given to CIS, (ii) a link to the license is provided. Additionally, if you remix, transform or build upon the CIS Benchmark(s), you may only distribute the modified materials if they are subject to the same license terms as the original Benchmark license and your derivative will no longer be a CIS Benchmark. Commercial use of CIS Benchmarks is subject to the prior approval of the Center for Internet Security. 1 | P a g e Table of Contents Overview .................................................................................................................................................................. 8 Intended Audience ........................................................................................................................................... 8 Consensus Guidance ........................................................................................................................................ 8 Typographical Conventions ......................................................................................................................... 9 Scoring Information ........................................................................................................................................ 9 Profile Definitions ......................................................................................................................................... 10 Acknowledgements ...................................................................................................................................... 11 Recommendations ............................................................................................................................................. 12 1 User Configuration .................................................................................................................................... 12 1.1 Account Settings ................................................................................................................................ 12 1.1.2.3 (L1) Ensure 'Authentication with Exchange server.' is set to 'Enabled:Kerberos/NTLM Password Authentication' (Scored) ........................................ 13 1.1.2.4 (L1) Ensure 'Automatically configure profile based on Active Directory Primary SMTP address' is set to Enabled (Scored) ................................................................ 15 1.1.2.5 (L1) Ensure 'Do not allow users to change permissions on folders' is set to Enabled (Scored) ................................................................................................................................. 17 1.1.2.6 (L1) Ensure 'Enable RPC encryption' is set to Enabled (Scored) ....................... 19 1.1.5.1 (L1) Ensure 'Automatically download attachments' is set to Disabled (Scored) ................................................................................................................................................... 22 1.1.5.2 (L1) Ensure 'Do not include Internet Calendar integration in Outlook' is set to Enabled (Scored) ................................................................................................................................. 24 1.1.6.1 (L1) Ensure 'Download full text of articles as HTML attachments' is set to Disabled (Scored) ................................................................................................................................ 26 1.1.6.2 (L1) Ensure 'Synchronize Outlook RSS Feeds with Common Feed List' is set to Disabled (Scored) ........................................................................................................................... 28 1.1.6.3 (L1) Ensure 'Turn Off RSS Feature' is set to Enabled (Scored) ........................... 30 1.2 Customizable Error Messages ...................................................................................................... 32 1.3 Disable Items in User Interface .................................................................................................... 32 1.4 Form Region Settings ....................................................................................................................... 32 2 | P a g e 1.5 InfoPath Integration ......................................................................................................................... 32 1.6 Meeting Workspace .......................................................................................................................... 33 1.6.1 (L1) Ensure 'Check to disable users from adding entries to server list' is set to Enabled:Publish default, disallow others (Scored) ................................................................ 33 1.7 MIME to MAPI Conversion ............................................................................................................. 35 1.8 Miscellaneous ..................................................................................................................................... 35 1.8.2.1 (L1) Ensure 'PST Null Data On Delete' is set to Enabled (Scored) ..................... 36 1.9 Outlook Options ................................................................................................................................. 38 1.9.4.2.2 (L1) Ensure ' Outlook Rich Text Options' is set to Enabled (Scored) ............ 39 1.9.4.2.3 (L1) Ensure 'Plain Text Options' is set to Disabled (Scored) ............................ 41 1.9.4.4 (L1) Ensure 'Do not allow signatures for e-mail messages' to 'Disabled' (Scored) ................................................................................................................................................... 43 1.9.6.1.2 (L1) Ensure 'Do not allow folders in non-default stores to be set as folder home pages' is set to Enabled (Scored) ...................................................................................... 46 1.9.6.1.3 (L1) Ensure 'Do not allow Outlook object model scripts to run for public folders' is set to Enabled (Scored) ................................................................................................ 48 1.9.6.1.4 (L1) Ensure 'Do not allow Outlook object model scripts to run for shared folders' is set to Enabled (Scored) ................................................................................................ 50 1.9.6.1.5 (L1) Ensure 'Use Unicode format when dragging e-mail message to file system' is set to Disabled (Scored) ............................................................................................... 52 1.9.6.3 (L1) Ensure 'Make Outlook the default program for E-mail, Contacts, and Calendar' is set to Enabled (Scored) ............................................................................................ 54 1.9.8.1.2.1 (L1) Ensure 'Access to published calendars' is set to Enabled (Scored) .. 57 1.9.8.1.2.2 (L1) Ensure 'Prevent publishing to a DAV server' is set to Enabled (Scored) ................................................................................................................................................... 59 1.9.8.1.2.3 (L1) Ensure 'Prevent publishing to Office.com' is set to Enabled (Scored) ..................................................................................................................................................................... 61 1.9.8.1.2.4 (L1) Ensure 'Restrict level of calendar details users can publish' is set to Enabled:Disables 'Full details' and 'Limited details' (Scored) ........................................... 63 1.9.8.1.2.5 (L1) Ensure 'Restrict upload method' is set to Enabled (Scored) ............... 65 1.9.8.3.3 (L1) Ensure 'Read e-mail as plain text' is set to Enabled (Scored) ................ 68 1.9.8.3.4 (L1) Ensure 'Read signed e-mail as plain text' is set to Enabled (Scored) .. 70 3 | P a g e 1.9.8.4.1 (L1) Ensure 'Add e-mail recipients to users' Safe Senders Lists' is set to Disabled (Scored) ................................................................................................................................ 72 1.9.8.4.2 (L1) Ensure 'Hide Junk Mail UI' is set to Disabled (Scored) .............................. 74 1.9.8.4.3 (L1) Ensure 'Junk E-mail protection level: Select level:' is set to Enabled:High (Scored) ....................................................................................................................... 76 1.9.8.4.4 (L1) Ensure 'Trust e-mail from contacts' is set to Enabled (Scored) ............ 78 1.9.11 (L1) Ensure 'Internet and Network Paths into Hyperlinks' is set to Disabled (Scored) ................................................................................................................................................... 81 1.10 Outlook Social Connector ............................................................................................................ 83 1.10.1 (L1) Ensure 'Do Not Download Photos from Active Directory' is set to Enabled (Scored) ................................................................................................................................