USNS MONTFORD POINT - Findings

V-223296 CAT II Add-on Management must be enabled for all Office 365 ProPlus...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DF2EE771A850F392B4BB4F6036A959A5BAB2A3F7 ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DF2EE771A850F392B4BB4F6036A959A5BAB2A3F7 ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F76D52B80C6B695F10518FF386F7D2D0343F8DD8 ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F76D52B80C6B695F10518FF386F7D2D0343F8DD8 ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security "Add-on Management" is set to "Enabled" and the check box is selected for every installed Office program. Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT If the value for each installed Office Program is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security "Add-on Management" to "Enabled" and select the check boxes for all installed Office programs.

V-223298 CAT II User name and password must be disabled in all Office progra...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0AE2F46D7BA10A12F4C2001BFDA16AE9B46D8141 ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0AE2F46D7BA10A12F4C2001BFDA16AE9B46D8141 ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 86883C299CEB4DDA8D75ED161C894EC98E916EDD ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 86883C299CEB4DDA8D75ED161C894EC98E916EDD ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security "Disable user name and password" is set to "Enabled" and the check box is selected for every installed Office program. Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE If the value for all installed programs is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security "Disable user name and password" to "Enabled" and select the check boxes for all installed Office programs.

V-223302 CAT II Navigate URL must be enabled in all Office programs.

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9543948092C7E4B502FE9908BBD6B7BEACD1C81D ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9543948092C7E4B502FE9908BBD6B7BEACD1C81D ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0463BA8BD367D642A51CBD6B3DCF117235F5F0D5 ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0463BA8BD367D642A51CBD6B3DCF117235F5F0D5 ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security >> Navigate URL is set to "Enabled" and the check box is selected for every installed Office program. Use the Windows Registry Editor to navigate to the following key: HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url If the value for all installed programs is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security >> Navigate URL to "Enabled" and select the check boxes for all installed Office programs.

V-223304 CAT II Protection from zone elevation must be enabled in all Office...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 38CDB3AC997D625103F939C94CEFB23C0DBF1F47 ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 38CDB3AC997D625103F939C94CEFB23C0DBF1F47 ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E728529F1B93A23AE109DD004DC2781CE4999336 ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E728529F1B93A23AE109DD004DC2781CE4999336 ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security >> Protection from Zone Elevation is set to "Enabled" and the check box is selected for every installed Office program. Use the Windows Registry Editor to navigate to the following key: HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation If the value for all installed programs is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security >> Protection from Zone Elevation to "Enabled" and select the check boxes for all installed Office programs.

V-223305 CAT II ActiveX installation restriction must be enabled in all Offi...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A743ED5644F3D75925C0746D3ED21D626E726310 ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A743ED5644F3D75925C0746D3ED21D626E726310 ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C20D022BECF6D5CFD67677AD59106CD490640B66 ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C20D022BECF6D5CFD67677AD59106CD490640B66 ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security >> Restrict ActiveX Install is set to "Enabled" and the check box is selected for every installed Office program. Use the Windows Registry Editor to navigate to the following key: HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall If the value for all installed programs is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security >> Restrict ActiveX Install to "Enabled" and select the check boxes for all installed Office programs.

V-223306 CAT II File Download Restriction must be enabled in all Office prog...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A4A7FD95414DF627096D1A67B22A2D3A9BDF0F7D ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A4A7FD95414DF627096D1A67B22A2D3A9BDF0F7D ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6F0481A33E55C4C98EB811F59F2A4EED9EC3DC9 ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6F0481A33E55C4C98EB811F59F2A4EED9EC3DC9 ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security >> Restrict File Download is set to "Enabled" and the check box is selected for every installed Office program. Use the Windows Registry Editor to navigate to the following key: HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload If the value for all installed programs is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security >> Restrict File Download to "Enabled" and select the check boxes for all installed Office programs.

V-223307 CAT II The Save from URL feature must be enabled in all Office prog...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 571A99B9FD9ADD92684C2ADBECCC42469C95EC85 ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 571A99B9FD9ADD92684C2ADBECCC42469C95EC85 ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F7D4C9B9F477B6528D04513FC5331EA2DDC86B7A ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F7D4C9B9F477B6528D04513FC5331EA2DDC86B7A ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security >> Saved from URL is set to "Enabled" and the check box is selected for every installed Office program. Use the Windows Registry Editor to navigate to the following key: HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck If the value for all installed programs is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security >> Saved from URL to "Enabled" and select the check boxes for all installed Office programs.

V-223308 CAT II Scripted Windows Security restrictions must be enabled in al...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 799F4C765118B91FAB655C1F8E44D962B2A46112 ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 799F4C765118B91FAB655C1F8E44D962B2A46112 ~~~~~ Installed Programs: Access, Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: msaccess.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B18DEB451D969E5BBA13B8BDB5F397DE82EDA096 ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B18DEB451D969E5BBA13B8BDB5F397DE82EDA096 ~~~~~ Installed Programs: Excel, Outlook, PowerPoint, Word Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: excel.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: outlook.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: powerpnt.exe Value: 0x00000001 (1) Type: REG_DWORD Registry Path: HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: winword.exe Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security >> Scripted Window Security Restrictions is set to "Enabled" and the check box is selected for every installed Office program. Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS If the value for all installed programs is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security >>Scripted Window Security Restrictions to "Enabled" and select the check boxes for all installed Office programs.

V-223310 CAT II Trusted Locations on the network must be disabled in Excel.

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: DEFCEA87A8A5B389D339BBC920A5DA25BB3907AB ~~~~~ 'Allow Trusted Locations on the network' is Disabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\trusted locations Value Name: AllowNetworkLocations Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: DEFCEA87A8A5B389D339BBC920A5DA25BB3907AB ~~~~~ 'Allow Trusted Locations on the network' is Disabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\trusted locations Value Name: AllowNetworkLocations Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: DEFCEA87A8A5B389D339BBC920A5DA25BB3907AB ~~~~~ 'Allow Trusted Locations on the network' is Disabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\trusted locations Value Name: AllowNetworkLocations Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: DEFCEA87A8A5B389D339BBC920A5DA25BB3907AB ~~~~~ 'Allow Trusted Locations on the network' is Disabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\trusted locations Value Name: AllowNetworkLocations Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Trusted Locations "Allow Trusted Locations on the network" is set to "Disabled". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\trusted locations If the value AllowNetworkLocations is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Trusted Locations "Allow Trusted Locations on the network" to "Disabled".

V-223314 CAT II Open/save of dBase III / IV format files must be blocked.

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: DECF55378D8719B588E3CDA5894EB38147D19316 ~~~~~ 'File Block Settings 'dBase III / IV files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: DBaseFiles Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: DECF55378D8719B588E3CDA5894EB38147D19316 ~~~~~ 'File Block Settings 'dBase III / IV files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: DBaseFiles Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: DECF55378D8719B588E3CDA5894EB38147D19316 ~~~~~ 'File Block Settings 'dBase III / IV files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: DBaseFiles Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: DECF55378D8719B588E3CDA5894EB38147D19316 ~~~~~ 'File Block Settings 'dBase III / IV files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: DBaseFiles Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "dBase III / IV files" is set to "Enabled: Open/Save blocked, use open policy". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock If the value DBaseFiles is REG_DWORD = 2, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "dBase III / IV files" to "Enabled: Open/Save blocked, use open policy".

V-223315 CAT II Open/save of Dif and Sylk format files must be blocked.

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: FBC0D56C700FFB903ADC7A9ED287D4BB73291E20 ~~~~~ 'File Block Settings 'Dif and Sylk files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: DifandSylkFiles Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: FBC0D56C700FFB903ADC7A9ED287D4BB73291E20 ~~~~~ 'File Block Settings 'Dif and Sylk files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: DifandSylkFiles Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: FBC0D56C700FFB903ADC7A9ED287D4BB73291E20 ~~~~~ 'File Block Settings 'Dif and Sylk files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: DifandSylkFiles Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: FBC0D56C700FFB903ADC7A9ED287D4BB73291E20 ~~~~~ 'File Block Settings 'Dif and Sylk files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: DifandSylkFiles Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Dif and Sylk files" is set to "Enabled: Open/Save blocked, use open policy". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock If the value DifandSylkFiles is REG_DWORD = 2, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Dif and Sylk files" to "Enabled: Open/Save blocked, use open policy".

V-223316 CAT II Open/save of Excel 2 macrosheets and add-in files must be bl...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 3116058A6B0F8D8D95EAB3DF266CF83483CA588E ~~~~~ 'File Block Settings 'Excel 2 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL2Macros Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 3116058A6B0F8D8D95EAB3DF266CF83483CA588E ~~~~~ 'File Block Settings 'Excel 2 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL2Macros Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 3116058A6B0F8D8D95EAB3DF266CF83483CA588E ~~~~~ 'File Block Settings 'Excel 2 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL2Macros Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 3116058A6B0F8D8D95EAB3DF266CF83483CA588E ~~~~~ 'File Block Settings 'Excel 2 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL2Macros Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 2 macrosheets and add-in files" is set to "Enabled: Open/Save blocked, use open policy". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock If the value XL2Macros is REG_DWORD = 2, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 2 macrosheets and add-in files" to "Enabled: Open/Save blocked, use open policy".

V-223317 CAT II Open/save of Excel 2 worksheets must be blocked.

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: B3CE734FFF7595C84E86A74BDCF0429EE5C1F1FF ~~~~~ 'File Block Settings 'Excel 2 worksheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL2Worksheets Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: B3CE734FFF7595C84E86A74BDCF0429EE5C1F1FF ~~~~~ 'File Block Settings 'Excel 2 worksheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL2Worksheets Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: B3CE734FFF7595C84E86A74BDCF0429EE5C1F1FF ~~~~~ 'File Block Settings 'Excel 2 worksheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL2Worksheets Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: B3CE734FFF7595C84E86A74BDCF0429EE5C1F1FF ~~~~~ 'File Block Settings 'Excel 2 worksheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL2Worksheets Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 2 worksheets" is set to "Enabled: Open/Save blocked, use open policy". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock If the value XL2Worksheets is REG_DWORD = 2, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 2 worksheets" to "Enabled: Open/Save blocked, use open policy".

V-223318 CAT II Open/save of Excel 3 macrosheets and add-in files must be bl...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 46A4AB4E4DA37377FC1E451A93D2BE0EE23387F5 ~~~~~ 'File Block Settings 'Excel 3 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL3Macros Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 46A4AB4E4DA37377FC1E451A93D2BE0EE23387F5 ~~~~~ 'File Block Settings 'Excel 3 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL3Macros Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 46A4AB4E4DA37377FC1E451A93D2BE0EE23387F5 ~~~~~ 'File Block Settings 'Excel 3 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL3Macros Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 46A4AB4E4DA37377FC1E451A93D2BE0EE23387F5 ~~~~~ 'File Block Settings 'Excel 3 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL3Macros Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 3 macrosheets and add-in files" is set to "Enabled: Open/Save blocked, use open policy". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock If the value XL3Macros is REG_DWORD = 2, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 3 macrosheets and add-in files" to "Enabled: Open/Save blocked, use open policy".

V-223319 CAT II Open/save of Excel 3 worksheets must be blocked.

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 81F7AAD3FDB684E4695F0023AF17D045E2CC1352 ~~~~~ 'File Block Settings 'Excel 3 worksheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL3Worksheets Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 81F7AAD3FDB684E4695F0023AF17D045E2CC1352 ~~~~~ 'File Block Settings 'Excel 3 worksheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL3Worksheets Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 81F7AAD3FDB684E4695F0023AF17D045E2CC1352 ~~~~~ 'File Block Settings 'Excel 3 worksheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL3Worksheets Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 81F7AAD3FDB684E4695F0023AF17D045E2CC1352 ~~~~~ 'File Block Settings 'Excel 3 worksheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL3Worksheets Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 3 worksheets" is set to "Enabled: Open/Save blocked, use open policy". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock If the value XL3Worksheets is REG_DWORD = 2, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 3 worksheets" to "Enabled: Open/Save blocked, use open policy".

V-223320 CAT II Open/save of Excel 4 macrosheets and add-in files must be bl...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 63D656E47CB2C86266E4168A813F39EBF395431D ~~~~~ 'File Block Settings 'Excel 4 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL4Macros Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 63D656E47CB2C86266E4168A813F39EBF395431D ~~~~~ 'File Block Settings 'Excel 4 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL4Macros Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 63D656E47CB2C86266E4168A813F39EBF395431D ~~~~~ 'File Block Settings 'Excel 4 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL4Macros Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 63D656E47CB2C86266E4168A813F39EBF395431D ~~~~~ 'File Block Settings 'Excel 4 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL4Macros Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 4 macrosheets and add-in files" is set to "Enabled: Open/Save blocked, use open policy". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock If the value XL4Macros is REG_DWORD = 2, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 4 macrosheets and add-in files" to "Enabled: Open/Save blocked, use open policy".

V-223321 CAT II Open/save of Excel 4 workbooks must be blocked.

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 7815F4D54101C05228C50E827DA80EA38B788FB3 ~~~~~ 'File Block Settings 'Excel 4 workbooks'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL4Workbooks Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 7815F4D54101C05228C50E827DA80EA38B788FB3 ~~~~~ 'File Block Settings 'Excel 4 workbooks'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL4Workbooks Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 7815F4D54101C05228C50E827DA80EA38B788FB3 ~~~~~ 'File Block Settings 'Excel 4 workbooks'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL4Workbooks Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 7815F4D54101C05228C50E827DA80EA38B788FB3 ~~~~~ 'File Block Settings 'Excel 4 workbooks'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL4Workbooks Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 4 workbooks" is set to "Enabled: Open/Save blocked, use open policy". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock If the value XL4Workbooks is REG_DWORD = 2, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 4 workbooks" to "Enabled: Open/Save blocked, use open policy".

V-223322 CAT II Open/save of Excel 4 worksheets must be blocked.

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 90766A0824F54F709EA3F9AEF207A1A0EACD1C86 ~~~~~ 'File Block Settings 'Excel 4 worksheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL4Worksheets Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 90766A0824F54F709EA3F9AEF207A1A0EACD1C86 ~~~~~ 'File Block Settings 'Excel 4 worksheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL4Worksheets Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 90766A0824F54F709EA3F9AEF207A1A0EACD1C86 ~~~~~ 'File Block Settings 'Excel 4 worksheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL4Worksheets Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 90766A0824F54F709EA3F9AEF207A1A0EACD1C86 ~~~~~ 'File Block Settings 'Excel 4 worksheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: XL4Worksheets Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 4 worksheets" is set to "Enabled: Open/Save blocked, use open policy". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock If the value XL4Worksheets is REG_DWORD = 2, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings "Excel 4 worksheets" to "Enabled: Open/Save blocked, use open policy".

V-223325 CAT II The default file block behavior must be set to not open bloc...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: D0485CE242052AC17400AF8FE202DB5C96018023 ~~~~~ 'File Block Settings 'Set default file block behavior'' is Enabled: (Blocked files are not opened) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: OpenInProtectedView Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: D0485CE242052AC17400AF8FE202DB5C96018023 ~~~~~ 'File Block Settings 'Set default file block behavior'' is Enabled: (Blocked files are not opened) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: OpenInProtectedView Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: D0485CE242052AC17400AF8FE202DB5C96018023 ~~~~~ 'File Block Settings 'Set default file block behavior'' is Enabled: (Blocked files are not opened) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: OpenInProtectedView Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: D0485CE242052AC17400AF8FE202DB5C96018023 ~~~~~ 'File Block Settings 'Set default file block behavior'' is Enabled: (Blocked files are not opened) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: OpenInProtectedView Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings >> Set default file block behavior is set to "Blocked files are not opened". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock If the value OpenInProtectedView is REG_DWORD = 0, this is not a finding.

Fix Text

Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings >> Set default file block behavior to "Enabled:Blocked files are not opened".

V-223326 CAT II Open/save of Web pages and Excel 2003 XML spreadsheets must ...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: C2A4A1AD6E6E8AAA46F7BEB4F9466CCAAE42DC52 ~~~~~ 'File Block Settings 'Web pages and Excel 2003 XML spreadsheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: htmlandxmlssfiles Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: C2A4A1AD6E6E8AAA46F7BEB4F9466CCAAE42DC52 ~~~~~ 'File Block Settings 'Web pages and Excel 2003 XML spreadsheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: htmlandxmlssfiles Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: C2A4A1AD6E6E8AAA46F7BEB4F9466CCAAE42DC52 ~~~~~ 'File Block Settings 'Web pages and Excel 2003 XML spreadsheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: htmlandxmlssfiles Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: C2A4A1AD6E6E8AAA46F7BEB4F9466CCAAE42DC52 ~~~~~ 'File Block Settings 'Web pages and Excel 2003 XML spreadsheets'' is Enabled: (Open/Save blocked, use open policy) Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock Value Name: htmlandxmlssfiles Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings >> Web pages and Excel 2003 XML spreadsheets is set to "Open/Save blocked, use open policy". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security\fileblock If the value for htmlandxmlssfiles is REG_DWORD = 2, this is not a finding.

Fix Text

Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> File Block Settings >> Web pages and Excel 2003 XML spreadsheets to "Open/Save blocked, use open policy".

V-223327 CAT II Extraction options must be blocked when opening corrupt Exce...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 38E9424B5151905C332CC6086FBF9243B12F05C1 ~~~~~ 'Do not show data extraction options when opening corrupt workbooks' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\options Value Name: extractdatadisableui Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 38E9424B5151905C332CC6086FBF9243B12F05C1 ~~~~~ 'Do not show data extraction options when opening corrupt workbooks' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\options Value Name: extractdatadisableui Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 38E9424B5151905C332CC6086FBF9243B12F05C1 ~~~~~ 'Do not show data extraction options when opening corrupt workbooks' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\options Value Name: extractdatadisableui Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 38E9424B5151905C332CC6086FBF9243B12F05C1 ~~~~~ 'Do not show data extraction options when opening corrupt workbooks' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\options Value Name: extractdatadisableui Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Data Recovery >> Do not show data extraction options when opening corrupt workbooks is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\options If the value for extractdatadisableui is REG_DWORD = 1, this is not a finding.

Fix Text

Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Data Recovery >> Do not show data extraction options when opening corrupt workbooks to "Enabled".

V-223333 CAT II Scan of encrypted macros in Excel Open XML workbooks must be...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 4A8A6ADB8FF8213A02507287859103BF68B75A28 ~~~~~ 'Scan encrypted macros in Excel Open XML workbooks' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: excelbypassencryptiedmacrosscan (Not found) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 4A8A6ADB8FF8213A02507287859103BF68B75A28 ~~~~~ 'Scan encrypted macros in Excel Open XML workbooks' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: excelbypassencryptiedmacrosscan (Not found) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 4A8A6ADB8FF8213A02507287859103BF68B75A28 ~~~~~ 'Scan encrypted macros in Excel Open XML workbooks' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: excelbypassencryptiedmacrosscan (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 4A8A6ADB8FF8213A02507287859103BF68B75A28 ~~~~~ 'Scan encrypted macros in Excel Open XML workbooks' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: excelbypassencryptiedmacrosscan (Not found) Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Scan encrypted macros in Excel Open XML workbooks is set to "Scan encrypted macros (default)". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security If the value excelbypassencryptedmacroscan does not exist, this is not a finding. If the value for excelbypassencryptedmacroscan is REG_DWORD = 0, this is not a finding.

Fix Text

Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Scan encrypted macros in Excel Open XML workbooks to "Scan encrypted macros (default)".

V-223334 CAT II File validation in Excel must be enabled.

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 356C43AFDCE812F3F52FCE137694D4C0412B5619 ~~~~~ 'Turn off file validation' is Disabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\filevalidation Value Name: enableonload Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 356C43AFDCE812F3F52FCE137694D4C0412B5619 ~~~~~ 'Turn off file validation' is Disabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\filevalidation Value Name: enableonload Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 356C43AFDCE812F3F52FCE137694D4C0412B5619 ~~~~~ 'Turn off file validation' is Disabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\filevalidation Value Name: enableonload Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 356C43AFDCE812F3F52FCE137694D4C0412B5619 ~~~~~ 'Turn off file validation' is Disabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\filevalidation Value Name: enableonload Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Turn off file validation is set to "Disabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security\filevalidation If the value for enableonload is REG_DWORD = 1, this is not a finding.

Fix Text

Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Turn off file validation to "Disabled".

V-223335 CAT II WEBSERVICE Function Notification in Excel must be configured...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: E69AD2F03D89C6FA7F30136921238A054AC8432F ~~~~~ 'WEBSERVICE Function Notification Settings' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: webservicefunctionwarnings (Not found) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: E69AD2F03D89C6FA7F30136921238A054AC8432F ~~~~~ 'WEBSERVICE Function Notification Settings' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: webservicefunctionwarnings (Not found) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: E69AD2F03D89C6FA7F30136921238A054AC8432F ~~~~~ 'WEBSERVICE Function Notification Settings' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: webservicefunctionwarnings (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: E69AD2F03D89C6FA7F30136921238A054AC8432F ~~~~~ 'WEBSERVICE Function Notification Settings' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: webservicefunctionwarnings (Not found) Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> WEBSERVICE Function Notification Settings is set to "Enabled" and "Disable all with notification". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security If the value webservicefunctionwarnings does not exist, this is not a finding. If the value for webservicefunctionwarnings is REG_DWORD = 1, this is not a finding. If the value for webservicefunctionwarnings is REG_DWORD = 2, this is a finding.

Fix Text

Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> WEBSERVICE Function Notification Settings to "Enabled" and "Disable all with notification".

V-223336 CAT II Macros must be blocked from running in Excel files from the ...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 692AE32D3A24A5BA3708E204CB2F7BEB71F545C4 ~~~~~ 'Block macros from running in Office files from the Internet' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: blockcontentexecutionfrominternet Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 692AE32D3A24A5BA3708E204CB2F7BEB71F545C4 ~~~~~ 'Block macros from running in Office files from the Internet' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: blockcontentexecutionfrominternet Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 692AE32D3A24A5BA3708E204CB2F7BEB71F545C4 ~~~~~ 'Block macros from running in Office files from the Internet' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: blockcontentexecutionfrominternet Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 692AE32D3A24A5BA3708E204CB2F7BEB71F545C4 ~~~~~ 'Block macros from running in Office files from the Internet' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: blockcontentexecutionfrominternet Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Block macros from running in Office files from the Internet is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security If the value blockcontentexecutionfrominternet is REG_DWORD = 1, this is not a finding.

Fix Text

Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Block macros from running in Office files from the Internet to "Enabled".

V-223337 CAT II Trust Bar notification must be enabled for unsigned applicat...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: F817384CE827CB917128598CDEAA0ADD551A6F2F ~~~~~ 'Disable Trust Bar Notification for unsigned application add-ins and block them' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: notbpromptunsignedaddin Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: F817384CE827CB917128598CDEAA0ADD551A6F2F ~~~~~ 'Disable Trust Bar Notification for unsigned application add-ins and block them' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: notbpromptunsignedaddin Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: F817384CE827CB917128598CDEAA0ADD551A6F2F ~~~~~ 'Disable Trust Bar Notification for unsigned application add-ins and block them' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: notbpromptunsignedaddin Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: F817384CE827CB917128598CDEAA0ADD551A6F2F ~~~~~ 'Disable Trust Bar Notification for unsigned application add-ins and block them' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security Value Name: notbpromptunsignedaddin Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Disable Trust Bar Notification for unsigned application add-ins and block them is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security If the value for notbpromptunsignedaddin is REG_DWORD = 1, this is not a finding.

Fix Text

Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Disable Trust Bar Notification for unsigned application add-ins and block them to "Enabled".

V-223340 CAT II Files from Internet zone must be opened in Excel in Protecte...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: B6AA2152314FB34DED4299BFBEDA6D97F6807915 ~~~~~ 'Do not open files from the Internet zone in Protected View' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview Value Name: DisableInternetFilesInPV (Not found) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: B6AA2152314FB34DED4299BFBEDA6D97F6807915 ~~~~~ 'Do not open files from the Internet zone in Protected View' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview Value Name: DisableInternetFilesInPV (Not found) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: B6AA2152314FB34DED4299BFBEDA6D97F6807915 ~~~~~ 'Do not open files from the Internet zone in Protected View' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview Value Name: DisableInternetFilesInPV (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: B6AA2152314FB34DED4299BFBEDA6D97F6807915 ~~~~~ 'Do not open files from the Internet zone in Protected View' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview Value Name: DisableInternetFilesInPV (Not found) Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Protected View >> Do not open files from the Internet zone in Protected View is set to "Disabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security\protectedview If the value DisableInternetFilesInPV is REG_DWORD = 0, this is not a finding. If the value does not exist, this is not a finding. If the value is REG_DWORD = 1, this is a finding.

Fix Text

Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Protected View >> Do not open files from the Internet zone in Protected View to "Disabled".

V-223341 CAT II Files from unsafe locations must be opened in Excel in Prote...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: BCFE5FE673BE81F769F3AAF0E44CA3793770E95B ~~~~~ 'Do not open files in unsafe locations in Protected View' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview Value Name: DisableUnsafeLocationsInPV (Not found) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: BCFE5FE673BE81F769F3AAF0E44CA3793770E95B ~~~~~ 'Do not open files in unsafe locations in Protected View' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview Value Name: DisableUnsafeLocationsInPV (Not found) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: BCFE5FE673BE81F769F3AAF0E44CA3793770E95B ~~~~~ 'Do not open files in unsafe locations in Protected View' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview Value Name: DisableUnsafeLocationsInPV (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: BCFE5FE673BE81F769F3AAF0E44CA3793770E95B ~~~~~ 'Do not open files in unsafe locations in Protected View' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview Value Name: DisableUnsafeLocationsInPV (Not found) Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Protected View >> Do not open files in unsafe locations in Protected View is set to "Disabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security\protectedview If the value DisableUnsafeLocationsInPV is REG_DWORD = 0, this is not a finding. If the value does not exist, this is not a finding. If the value is REG_DWORD = 1, this is a finding.

Fix Text

Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Protected View >> Do not open files in unsafe locations in Protected View to "Disabled".

V-223342 CAT II Files failing file validation must be opened in Excel in Pro...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 0F2DB70326C00FF2291AC4E7E39EFE13737F92B2 ~~~~~ 'Set document behvior if file validateion fails' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Excel\security\filevalidation Value Name: openinprotectedview (Not found) 'Allow edit' is Unchecked Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Excel\security\filevalidation Value Name: DisableEditFromPV Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 0F2DB70326C00FF2291AC4E7E39EFE13737F92B2 ~~~~~ 'Set document behvior if file validateion fails' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Excel\security\filevalidation Value Name: openinprotectedview (Not found) 'Allow edit' is Unchecked Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Excel\security\filevalidation Value Name: DisableEditFromPV Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 0F2DB70326C00FF2291AC4E7E39EFE13737F92B2 ~~~~~ 'Set document behvior if file validateion fails' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Excel\security\filevalidation Value Name: openinprotectedview (Not found) 'Allow edit' is Unchecked Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Excel\security\filevalidation Value Name: DisableEditFromPV Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 0F2DB70326C00FF2291AC4E7E39EFE13737F92B2 ~~~~~ 'Set document behvior if file validateion fails' is Not Configured in group policy which is acceptable per the STIG. Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Excel\security\filevalidation Value Name: openinprotectedview (Not found) 'Allow edit' is Unchecked Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Excel\security\filevalidation Value Name: DisableEditFromPV Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Protected View >> Set document behavior if file validation fails is set to "Enabled: Open in Protected View". Verify the check box for "Allow edit" is not selected. Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\Excel\security\filevalidation If the value openinprotectedview does not exist, this is not a finding. If both the value for openinprotectedview is REG_DWORD = 1 and the value for DisableEditFromPV is set to REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Protected View >> Set document behavior if file validation fails to "Enabled: Open in Protected View". Uncheck the "Allow edit" check box.

V-223343 CAT II File attachments from Outlook must be opened in Excel in Pro...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 9E35868F505D9B7EF044EBFCB7555F859E5B5B90 ~~~~~ 'Turn off Protected View for attachments opened from Outlook' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview Value Name: DisableAttachmentsInPV Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 9E35868F505D9B7EF044EBFCB7555F859E5B5B90 ~~~~~ 'Turn off Protected View for attachments opened from Outlook' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview Value Name: DisableAttachmentsInPV Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 9E35868F505D9B7EF044EBFCB7555F859E5B5B90 ~~~~~ 'Turn off Protected View for attachments opened from Outlook' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview Value Name: DisableAttachmentsInPV Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 9E35868F505D9B7EF044EBFCB7555F859E5B5B90 ~~~~~ 'Turn off Protected View for attachments opened from Outlook' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview Value Name: DisableAttachmentsInPV Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Protected View >> Turn off Protected View for attachments opened from Outlook is set to "Disabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security\protectedview If the value DisableAttachmentsInPV is REG_DWORD = 0, this is not a finding.

Fix Text

Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> Protected View >> Turn off Protected View for attachments opened from Outlook to "Disabled".

V-223344 CAT II The SIP security mode in Lync must be enabled.

4 assets Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 4509309295E46E18CF4C294C420C55851A7ACF6E ~~~~~ Lync is not installed so this requirement is NA per the STIG Overview. Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 4509309295E46E18CF4C294C420C55851A7ACF6E ~~~~~ Lync is not installed so this requirement is NA per the STIG Overview. Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 10/23/2025 ResultHash: 4509309295E46E18CF4C294C420C55851A7ACF6E ~~~~~ Lync is not installed so this requirement is NA per the STIG Overview. Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 10/23/2025 ResultHash: 4509309295E46E18CF4C294C420C55851A7ACF6E ~~~~~ Lync is not installed so this requirement is NA per the STIG Overview. Comments

Check Text

Verify the policy value for Computer Configuration >> Administrative Templates >> Skype for Business 2016 >> Microsoft Lync Feature Policies "Configure SIP security mode" is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\office\16.0\lync If the value enablesiphighsecuritymode is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Skype for Business 2016 >> Microsoft Lync Feature Policies "Configure SIP security mode" to "Enabled".

V-223345 CAT II The HTTP fallback for SIP connection in Lync must be disable...

4 assets Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 4509309295E46E18CF4C294C420C55851A7ACF6E ~~~~~ Lync is not installed so this requirement is NA per the STIG Overview. Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 4509309295E46E18CF4C294C420C55851A7ACF6E ~~~~~ Lync is not installed so this requirement is NA per the STIG Overview. Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 10/23/2025 ResultHash: 4509309295E46E18CF4C294C420C55851A7ACF6E ~~~~~ Lync is not installed so this requirement is NA per the STIG Overview. Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 10/23/2025 ResultHash: 4509309295E46E18CF4C294C420C55851A7ACF6E ~~~~~ Lync is not installed so this requirement is NA per the STIG Overview. Comments

Check Text

Verify the policy value for Computer Configuration >> Administrative Templates >> Skype for Business 2016 >> Microsoft Lync Feature Policies "Disable HTTP fallback for SIP connection" is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\office\16.0\lync If the value disablehttpconnect is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Skype for Business 2016 >> Microsoft Lync Feature Policies "Disable HTTP fallback for SIP connection" to "Enabled".

V-223346 CAT II The Exchange client authentication with Exchange servers mus...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: F5146E0EF9944223703A266026E50833A4D2EC0C ~~~~~ 'Authentication with Exchange Server' is Enabled: (Kerberos Password Authentication) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: authenticationservice Value: 0x00000010 (16) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: F5146E0EF9944223703A266026E50833A4D2EC0C ~~~~~ 'Authentication with Exchange Server' is Enabled: (Kerberos Password Authentication) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: authenticationservice Value: 0x00000010 (16) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: F5146E0EF9944223703A266026E50833A4D2EC0C ~~~~~ 'Authentication with Exchange Server' is Enabled: (Kerberos Password Authentication) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: authenticationservice Value: 0x00000010 (16) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: F5146E0EF9944223703A266026E50833A4D2EC0C ~~~~~ 'Authentication with Exchange Server' is Enabled: (Kerberos Password Authentication) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: authenticationservice Value: 0x00000010 (16) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Account Settings >> Exchange >> Authentication with Exchange Server is set to Kerberos Password Authentication. Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value authenticationservice is set to REG_DWORD = 16 (decimal) or 10 (hex), this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Account Settings >> Exchange >> Authentication with Exchange Server to Kerberos Password Authentication.

V-223347 CAT II Outlook must use remote procedure call (RPC) encryption to c...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: EF59F7F2C0DEA9CFFCA75EE400AD4C269DD9219A ~~~~~ 'Enable RPC encryption' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\rpc Value Name: enablerpcencryption Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: EF59F7F2C0DEA9CFFCA75EE400AD4C269DD9219A ~~~~~ 'Enable RPC encryption' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\rpc Value Name: enablerpcencryption Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: EF59F7F2C0DEA9CFFCA75EE400AD4C269DD9219A ~~~~~ 'Enable RPC encryption' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\rpc Value Name: enablerpcencryption Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: EF59F7F2C0DEA9CFFCA75EE400AD4C269DD9219A ~~~~~ 'Enable RPC encryption' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\rpc Value Name: enablerpcencryption Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Account Settings >> Exchange >> Enable RPC encryption is set to "Enabled". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\rpc If the value for enablerpcencryption is set to REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Account Settings >> Exchange >> Enable RPC encryption to "Enabled".

V-223348 CAT II Scripts associated with public folders must be prevented fro...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 8737D2D54EDB3BA99D8A042A10119FA417273A4D ~~~~~ 'Do not allow Outlook object model scripts to run for public folders' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: publicfolderscript Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 8737D2D54EDB3BA99D8A042A10119FA417273A4D ~~~~~ 'Do not allow Outlook object model scripts to run for public folders' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: publicfolderscript Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 8737D2D54EDB3BA99D8A042A10119FA417273A4D ~~~~~ 'Do not allow Outlook object model scripts to run for public folders' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: publicfolderscript Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 8737D2D54EDB3BA99D8A042A10119FA417273A4D ~~~~~ 'Do not allow Outlook object model scripts to run for public folders' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: publicfolderscript Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy for Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for public folders is set to "Enabled". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for publicfolderscript is set to REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for public folders to "Enabled".

V-223349 CAT II Scripts associated with shared folders must be prevented fro...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 622BD34DC9C64608D57450FEDFFBF1A97B714E49 ~~~~~ 'Do not allow Outlook object model scripts to run for shared folders' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: sharedfolderscript Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 622BD34DC9C64608D57450FEDFFBF1A97B714E49 ~~~~~ 'Do not allow Outlook object model scripts to run for shared folders' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: sharedfolderscript Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 622BD34DC9C64608D57450FEDFFBF1A97B714E49 ~~~~~ 'Do not allow Outlook object model scripts to run for shared folders' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: sharedfolderscript Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 622BD34DC9C64608D57450FEDFFBF1A97B714E49 ~~~~~ 'Do not allow Outlook object model scripts to run for shared folders' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: sharedfolderscript Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for shared folders is set to "Enabled". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for sharedfolderscript is set to REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for shared folders to "Enabled".

V-223352 CAT II Active X One-Off forms must only be enabled to load with Out...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: F97A99C3426D2D49F21F519E1B129732C7A8E58B ~~~~~ 'Allow Active X One Off Forms' is Enabled: (Load only Outlook Controls) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: allowactivexoneoffforms Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: F97A99C3426D2D49F21F519E1B129732C7A8E58B ~~~~~ 'Allow Active X One Off Forms' is Enabled: (Load only Outlook Controls) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: allowactivexoneoffforms Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: F97A99C3426D2D49F21F519E1B129732C7A8E58B ~~~~~ 'Allow Active X One Off Forms' is Enabled: (Load only Outlook Controls) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: allowactivexoneoffforms Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: F97A99C3426D2D49F21F519E1B129732C7A8E58B ~~~~~ 'Allow Active X One Off Forms' is Enabled: (Load only Outlook Controls) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: allowactivexoneoffforms Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Allow Active X One Off Forms is set to "Enabled" "Load only Outlook Controls". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for allowactivexoneoffforms is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Allow Active X One Off Forms to "Enabled" "Load only Outlook Controls".

V-223353 CAT II Outlook must be configured to prevent users overriding attac...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 2A344EC8276D81EF338D1902160D3ECE70AC9FD2 ~~~~~ 'Prevent users from customizing attachment security settings' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook Value Name: disallowattachmentcustomization Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 2A344EC8276D81EF338D1902160D3ECE70AC9FD2 ~~~~~ 'Prevent users from customizing attachment security settings' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook Value Name: disallowattachmentcustomization Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 2A344EC8276D81EF338D1902160D3ECE70AC9FD2 ~~~~~ 'Prevent users from customizing attachment security settings' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook Value Name: disallowattachmentcustomization Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 2A344EC8276D81EF338D1902160D3ECE70AC9FD2 ~~~~~ 'Prevent users from customizing attachment security settings' is Enabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook Value Name: disallowattachmentcustomization Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Prevent users from customizing attachment security settings is set to "Enabled". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook If the value for disallowattachmentcustomization is set to REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Prevent users from customizing attachment security settings to "Enabled".

V-223354 CAT II Internet must not be included in Safe Zone for picture downl...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 479E6BC429BD5183B6CAC013D30CFF3C91847FB7 ~~~~~ 'Include Internet in Safe Zones for Automatic Picture Download' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail Value Name: Internet Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 479E6BC429BD5183B6CAC013D30CFF3C91847FB7 ~~~~~ 'Include Internet in Safe Zones for Automatic Picture Download' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail Value Name: Internet Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 479E6BC429BD5183B6CAC013D30CFF3C91847FB7 ~~~~~ 'Include Internet in Safe Zones for Automatic Picture Download' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail Value Name: Internet Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 479E6BC429BD5183B6CAC013D30CFF3C91847FB7 ~~~~~ 'Include Internet in Safe Zones for Automatic Picture Download' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail Value Name: Internet Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Automatic Picture Download Settings >> Include Internet in Safe Zones for Automatic Picture Download is set to "Disabled". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\options\mail If the value for Internet is set to REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Automatic Picture Download Settings >> Include Internet in Safe Zones for Automatic Picture Download to "Disabled".

V-223356 CAT II The minimum encryption key length in Outlook must be at leas...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 51ED0C30D17751569A3D7290804A7CAA73AD9153 ~~~~~ 'Minimum encryption settings' is Enabled: (Minimum key size (in bits) of '168') Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: minenckey Value: 0x000000a8 (168) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 51ED0C30D17751569A3D7290804A7CAA73AD9153 ~~~~~ 'Minimum encryption settings' is Enabled: (Minimum key size (in bits) of '168') Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: minenckey Value: 0x000000a8 (168) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 51ED0C30D17751569A3D7290804A7CAA73AD9153 ~~~~~ 'Minimum encryption settings' is Enabled: (Minimum key size (in bits) of '168') Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: minenckey Value: 0x000000a8 (168) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 51ED0C30D17751569A3D7290804A7CAA73AD9153 ~~~~~ 'Minimum encryption settings' is Enabled: (Minimum key size (in bits) of '168') Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: minenckey Value: 0x000000a8 (168) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Cryptography >> Minimum encryption settings is set to "Enabled" and a Minimum key size (in bits) of "168" or above. Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for minenckey is set to 168 or above, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Cryptography >> Minimum encryption settings to "Enabled"and a Minimum key size (in bits) of "168" or above.

V-223358 CAT II Outlook must be configured to allow retrieving of Certificat...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: CAC0862021F1CE3A46BC12E6271CF73E336D0607 ~~~~~ 'Retrieving CRLs (Certificate Revocation Lists)' is Enabled: (When online always retrieve the CRL) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: usecrlchasing Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: CAC0862021F1CE3A46BC12E6271CF73E336D0607 ~~~~~ 'Retrieving CRLs (Certificate Revocation Lists)' is Enabled: (When online always retrieve the CRL) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: usecrlchasing Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: CAC0862021F1CE3A46BC12E6271CF73E336D0607 ~~~~~ 'Retrieving CRLs (Certificate Revocation Lists)' is Enabled: (When online always retrieve the CRL) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: usecrlchasing Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: CAC0862021F1CE3A46BC12E6271CF73E336D0607 ~~~~~ 'Retrieving CRLs (Certificate Revocation Lists)' is Enabled: (When online always retrieve the CRL) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: usecrlchasing Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Cryptography >> Signature Status dialog box >> Retrieving CRLs (Certificate Revocation Lists) is set to "Enabled" "When online always retrieve the CRL". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for usecrlchasing is set to REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Cryptography >> Signature Status dialog box >> Retrieving CRLs (Certificate Revocation Lists) to "Enabled" "When online always retrieve the CRL".

V-223359 CAT II The Outlook Security Mode must be enabled to always use the ...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 4D4C911F63DBC37FCEB01E849C424D2B113902D8 ~~~~~ 'Outlook Security Mode' is Enabled: (Use Outlook Security Group Policy) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: adminsecuritymode Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 4D4C911F63DBC37FCEB01E849C424D2B113902D8 ~~~~~ 'Outlook Security Mode' is Enabled: (Use Outlook Security Group Policy) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: adminsecuritymode Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 4D4C911F63DBC37FCEB01E849C424D2B113902D8 ~~~~~ 'Outlook Security Mode' is Enabled: (Use Outlook Security Group Policy) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: adminsecuritymode Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 4D4C911F63DBC37FCEB01E849C424D2B113902D8 ~~~~~ 'Outlook Security Mode' is Enabled: (Use Outlook Security Group Policy) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: adminsecuritymode Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Outlook Security Mode is set to "Enabled (Use Outlook Security Group Policy)". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for adminsecuritymode is set to REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Outlook Security Mode to "Enabled (Use Outlook Security Group Policy)".

V-223361 CAT II The display of Level 1 attachments must be disabled in Outlo...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 41D7B63741915C9E849790348F78AD30C2F00495 ~~~~~ 'Display Level 1 attachments' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: ShowLevel1Attach Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 41D7B63741915C9E849790348F78AD30C2F00495 ~~~~~ 'Display Level 1 attachments' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: ShowLevel1Attach Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 41D7B63741915C9E849790348F78AD30C2F00495 ~~~~~ 'Display Level 1 attachments' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: ShowLevel1Attach Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 41D7B63741915C9E849790348F78AD30C2F00495 ~~~~~ 'Display Level 1 attachments' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: ShowLevel1Attach Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Attachment Security >> Display Level 1 attachments is set to "Disabled". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\outlook\security If the value ShowLevel1Attach is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Attachment Security "Display Level 1 attachments" to "Disabled".

V-223362 CAT II Level 1 file attachments must be blocked from being delivere...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 1605A8C1612A87BB82172E813DF11582FC593FEA ~~~~~ 'Remove file extensions blocked as Level 1' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\outlook\security Value Name: FileExtensionsRemoveLevel1 (Not found) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 1605A8C1612A87BB82172E813DF11582FC593FEA ~~~~~ 'Remove file extensions blocked as Level 1' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\outlook\security Value Name: FileExtensionsRemoveLevel1 (Not found) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 1605A8C1612A87BB82172E813DF11582FC593FEA ~~~~~ 'Remove file extensions blocked as Level 1' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\outlook\security Value Name: FileExtensionsRemoveLevel1 (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 1605A8C1612A87BB82172E813DF11582FC593FEA ~~~~~ 'Remove file extensions blocked as Level 1' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\outlook\security Value Name: FileExtensionsRemoveLevel1 (Not found) Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Attachment Security >> Remove file extensions blocked as Level 1 is set to "Disabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security\FileExtensionsRemoveLevel1 If the registry key exists, this is a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Attachment Security >> Remove file extensions blocked as Level 1 to "Disabled".

V-223363 CAT II Level 2 file attachments must be blocked from being delivere...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 3359150706AEEC6955B2715BFA52F9775C1CA2BD ~~~~~ 'Remove file extensions blocked as Level 2' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\outlook\security Value Name: FileExtensionsRemoveLevel2 (Not found) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 3359150706AEEC6955B2715BFA52F9775C1CA2BD ~~~~~ 'Remove file extensions blocked as Level 2' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\outlook\security Value Name: FileExtensionsRemoveLevel2 (Not found) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 3359150706AEEC6955B2715BFA52F9775C1CA2BD ~~~~~ 'Remove file extensions blocked as Level 2' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\outlook\security Value Name: FileExtensionsRemoveLevel2 (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 3359150706AEEC6955B2715BFA52F9775C1CA2BD ~~~~~ 'Remove file extensions blocked as Level 2' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\outlook\security Value Name: FileExtensionsRemoveLevel2 (Not found) Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Attachment Security >> Remove file extensions blocked as Level 2 is set to "Disabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security\FileExtensionsRemoveLevel2 If the registry key exists, this is a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Attachment Security >> Remove file extensions blocked as Level 2 to "Disabled".

V-223364 CAT II Outlook must be configured to not run scripts in forms in wh...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 290D06434BADE923ADB9DC85373178CF4C655DAB ~~~~~ 'Allow scripts in one-off Outlook forms' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: EnableOneOffFormScripts Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 290D06434BADE923ADB9DC85373178CF4C655DAB ~~~~~ 'Allow scripts in one-off Outlook forms' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: EnableOneOffFormScripts Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 290D06434BADE923ADB9DC85373178CF4C655DAB ~~~~~ 'Allow scripts in one-off Outlook forms' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: EnableOneOffFormScripts Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 290D06434BADE923ADB9DC85373178CF4C655DAB ~~~~~ 'Allow scripts in one-off Outlook forms' is Disabled Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: EnableOneOffFormScripts Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Custom Form Security "Allow scripts in one-off Outlook forms" is set to "Disabled". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\outlook\security If the value EnableOneOffFormScripts is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Custom Form Security "Allow scripts in one-off Outlook forms" to "Disabled".

V-223365 CAT II When a custom action is executed that uses the Outlook objec...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 398F7E965D7BC484A4CD6F3387B9795EF5C41C77 ~~~~~ 'Set Outlook object model custom actions execution prompt' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: promptoomcustomaction Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 398F7E965D7BC484A4CD6F3387B9795EF5C41C77 ~~~~~ 'Set Outlook object model custom actions execution prompt' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: promptoomcustomaction Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 398F7E965D7BC484A4CD6F3387B9795EF5C41C77 ~~~~~ 'Set Outlook object model custom actions execution prompt' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: promptoomcustomaction Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 398F7E965D7BC484A4CD6F3387B9795EF5C41C77 ~~~~~ 'Set Outlook object model custom actions execution prompt' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: promptoomcustomaction Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Custom Form Security >> Set Outlook object model custom actions execution prompt is set to "Enabled" and "Automatically Deny". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for "promptoomcustomaction" is set to "REG_DWORD = 0", this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Custom Form Setting >> Set Outlook object model custom actions execution prompt to "Enabled" and select "Automatically Deny".

V-223366 CAT II When an untrusted program attempts to programmatically acces...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: BE00F145FB5044FC89C319331CAB046BE75AF3FD ~~~~~ 'Outlook object model prompt when accessing an address book' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: promptoomaddressbookaccess Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: BE00F145FB5044FC89C319331CAB046BE75AF3FD ~~~~~ 'Outlook object model prompt when accessing an address book' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: promptoomaddressbookaccess Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: BE00F145FB5044FC89C319331CAB046BE75AF3FD ~~~~~ 'Outlook object model prompt when accessing an address book' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: promptoomaddressbookaccess Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: BE00F145FB5044FC89C319331CAB046BE75AF3FD ~~~~~ 'Outlook object model prompt when accessing an address book' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: promptoomaddressbookaccess Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Programmatic Security >> Configure Outlook object model prompt when accessing an address book is set to "Enabled (Automatically Deny)". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for promptoomaddressbookaccess is set to REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Programmatic Security >> Configure Outlook object model prompt when accessing an address book to "Enabled (Automatically Deny)".

V-223367 CAT II When a user designs a custom form in Outlook and attempts to...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: A908F49CE8BF06C0F75AA12A391B3BBA9762360A ~~~~~ 'Outlook object model prompt When accessing the Formula property of a UserProperty object' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: PromptOOMFormulaAccess Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: A908F49CE8BF06C0F75AA12A391B3BBA9762360A ~~~~~ 'Outlook object model prompt When accessing the Formula property of a UserProperty object' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: PromptOOMFormulaAccess Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: A908F49CE8BF06C0F75AA12A391B3BBA9762360A ~~~~~ 'Outlook object model prompt When accessing the Formula property of a UserProperty object' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: PromptOOMFormulaAccess Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: A908F49CE8BF06C0F75AA12A391B3BBA9762360A ~~~~~ 'Outlook object model prompt When accessing the Formula property of a UserProperty object' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: PromptOOMFormulaAccess Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Programmatic Security >> Configure Outlook object model prompt when accessing the Formula property of a UserProperty object is set to "Enabled (Automatically Deny)". Use the Windows Registry to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\outlook\security If the value PromptOOMFormulaAccess is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Programmatic Security >> Configure Outlook object model prompt When accessing the Formula property of a UserProperty object to "Enabled (Automatically Deny)".

V-223368 CAT II When an untrusted program attempts to use the Save As comman...

4 assets 4 Closed Microsoft Office 365...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 9C78D999BA6E5112B4E4D97A061B1FCE35F60679 ~~~~~ 'Outlook object model prompt when executing Save As' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: promptoomsaveas Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 9C78D999BA6E5112B4E4D97A061B1FCE35F60679 ~~~~~ 'Outlook object model prompt when executing Save As' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: promptoomsaveas Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 9C78D999BA6E5112B4E4D97A061B1FCE35F60679 ~~~~~ 'Outlook object model prompt when executing Save As' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: promptoomsaveas Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 9C78D999BA6E5112B4E4D97A061B1FCE35F60679 ~~~~~ 'Outlook object model prompt when executing Save As' is Enabled: (Automatically Deny) Registry Path: HKCU:\software\policies\microsoft\office\16.0\outlook\security Value Name: promptoomsaveas Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Programmatic Security >> Configure Outlook object model prompt when executing Save As is set to "Enabled (Automatically Deny)". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for promptoomsaveas is set to REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Security Form Settings >> Programmatic Security >> Configure Outlook object model prompt when executing Save As to "Enabled (Automatically Deny)".

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text