| Vuln ID | Severity | Asset | STIG | Title | Status | Doc Status | Assigned To | Actions |
|---|---|---|---|---|---|---|---|---|
| V-278355 | CAT II | MONT-SW-89108 | Microsoft Office 365 ProPlus Security Te... | Sending of diagnostic data to Microsoft must be di... | - | |||
Check TextVerify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Privacy >> Trust Center >> "Configure the level of client software diagnostic data sent by Office to Microsoft" is set to "Enabled", and "Neither" from the Options is selected. Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\Microsoft\office\common\clienttelemetry If the value "SendTelemetry" is "REG_DWORD = 3", this is not a finding. If the registry key does not exist or is not configured properly, this is a finding. Fix TextSet the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Privacy >> Trust Center >> "Configure the level of client software diagnostic data sent by Office to Microsoft" to "Enabled" and select "Neither" from the Options. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: FA1B0546362AA5A11841448F5C8094D526A8E3AF ~~~~~ 'Configure the level of client software diagnostic data sent by Office to Microsoft' is NOT Enabled: (Neither) Registry Path: HKCU:\software\policies\Microsoft\office\common\clienttelemetry Value Name: SendTelemetry (Not found)
Source: MONT-SW-89108_MSOffice365_V3R4_20251217-202911.ckl
Scan Date: 2026-03-04T15:25:16.145630
Technology Area: Windows Operating System
|
||||||||
| V-278355 | CAT II | MONT-SW-89134 | Microsoft Office 365 ProPlus Security Te... | Sending of diagnostic data to Microsoft must be di... | - | |||
Check TextVerify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Privacy >> Trust Center >> "Configure the level of client software diagnostic data sent by Office to Microsoft" is set to "Enabled", and "Neither" from the Options is selected. Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\Microsoft\office\common\clienttelemetry If the value "SendTelemetry" is "REG_DWORD = 3", this is not a finding. If the registry key does not exist or is not configured properly, this is a finding. Fix TextSet the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Privacy >> Trust Center >> "Configure the level of client software diagnostic data sent by Office to Microsoft" to "Enabled" and select "Neither" from the Options. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: FA1B0546362AA5A11841448F5C8094D526A8E3AF ~~~~~ 'Configure the level of client software diagnostic data sent by Office to Microsoft' is NOT Enabled: (Neither) Registry Path: HKCU:\software\policies\Microsoft\office\common\clienttelemetry Value Name: SendTelemetry (Not found)
Source: MONT-SW-89134_MSOffice365_V3R4_20251217-201101.ckl
Scan Date: 2026-03-04T15:25:42.171357
Technology Area: Windows Operating System
|
||||||||