UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Open/Save actions for web pages and Excel 2003 XML spreadsheets must be blocked.


Overview

Finding ID Version Rule ID IA Controls Severity
V-26613 DTOO120 SV-53638r2_rule ECSC-1 Low
Description
This policy setting allows for determining whether users can open, view, edit, or save Excel files with the format specified by the title
STIG Date
Microsoft Excel 2013 STIG 2015-06-18

Details

Check Text ( C-47764r1_chk )
Verify the policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2013 -> Excel Options -> Security -> Trust Center -> File Block Settings "Web pages and Excel 2003 XML spreadsheets" is set to "Enabled: Open/Save blocked, use open policy".

Procedure: Use the Windows Registry Editor to navigate to the following key:

HKCU\Software\Policies\Microsoft\Office\15.0\excel\security\fileblock

Criteria: If the value HtmlandXmlssFiles is REG_DWORD = 2, this is not a finding.
Fix Text (F-46564r1_fix)
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2013 -> Excel Options -> Security -> Trust Center -> File Block Settings "Web pages and Excel 2003 XML spreadsheets" to "Enabled: Open/Save blocked, use open policy".