| Vuln ID | Severity | Asset | STIG | Title | Status | Doc Status | Assigned To | Actions |
|---|---|---|---|---|---|---|---|---|
| V-278357 | CAT II | MONT-SW-89108 | Microsoft Office 365 ProPlus Security Te... | Connected experiences that download online content... | - | |||
Check TextVerify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Privacy >> Trust Center >> "Allow the use of connected experiences in Office that download online content" is set to "Disabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\Microsoft\office\16.0\common\privacy\ If the value "DownloadContentDisabled" is "REG_DWORD = 2", this is not a finding. If the registry key does not exist or is not configured properly, this is a finding. Fix TextSet the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Privacy >> Trust Center >> "Allow the use of connected experiences in Office that download online content" to "Disabled". Finding DetailsEvaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 6A7C17AC9A74BA064A69ABF59510B33FE6AA651E ~~~~~ 'Allow the use of connected experiences in Office that download online content' is NOT Disabled Registry Path: HKCU:\software\policies\Microsoft\office\16.0\common\privacy Value Name: DownloadContentDisabled (Not found)
Source: MONT-SW-89108_MSOffice365_V3R4_20251217-202911.ckl
Scan Date: 2026-03-04T15:25:16.145630
Technology Area: Windows Operating System
|
||||||||
| V-278357 | CAT II | MONT-SW-89134 | Microsoft Office 365 ProPlus Security Te... | Connected experiences that download online content... | - | |||
Check TextVerify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Privacy >> Trust Center >> "Allow the use of connected experiences in Office that download online content" is set to "Disabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\Microsoft\office\16.0\common\privacy\ If the value "DownloadContentDisabled" is "REG_DWORD = 2", this is not a finding. If the registry key does not exist or is not configured properly, this is a finding. Fix TextSet the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Privacy >> Trust Center >> "Allow the use of connected experiences in Office that download online content" to "Disabled". Finding DetailsEvaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 6A7C17AC9A74BA064A69ABF59510B33FE6AA651E ~~~~~ 'Allow the use of connected experiences in Office that download online content' is NOT Disabled Registry Path: HKCU:\software\policies\Microsoft\office\16.0\common\privacy Value Name: DownloadContentDisabled (Not found)
Source: MONT-SW-89134_MSOffice365_V3R4_20251217-201101.ckl
Scan Date: 2026-03-04T15:25:42.171357
Technology Area: Windows Operating System
|
||||||||