Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available

DoD Office 2019-M365 Apps STIG Comp v3r4
Data collected on: 9/12/2025 10:23:53 AM |

General
Details

Domain | security.local
Owner | SECURITY\Domain Admins
Created | 9/12/2025 7:17:54 AM
Modified | 9/12/2025 7:18:24 AM
User Revisions | 1 (AD), 1 (SYSVOL)
Computer Revisions | 1 (AD), 1 (SYSVOL)
Unique ID | {C68B9BD7-9DA5-4C71-BE2D-66F78FA73923}
GPO Status | User settings disabled

Links

Location | Enforced | Link Status | Path
--- | --- | --- | ---
None

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:

Name
NT AUTHORITY\Authenticated Users

Delegation
These groups and users have the specified permission for this GPO

Name | Allowed Permissions | Inherited
--- | --- | ---
NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No
NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No
SECURITY\Domain Admins | Edit settings, delete, modify security | No
SECURITY\Enterprise Admins | Edit settings, delete, modify security | No

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local computer.
Microsoft Office 2016 (Machine)/Security Settings/IE Security

Policy | Setting | Comment
--- | --- | ---
Add-on Management | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled
Policy | Setting | Comment
Consistent Mime Handling | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled
Policy | Setting | Comment
Disable user name and password | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled
Policy | Setting | Comment
Information Bar | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled
Policy | Setting | Comment
Local Machine Zone Lockdown Security | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled
Policy | Setting | Comment
Mime Sniffing Safety Feature | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled
Policy | Setting | Comment
Navigate URL | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled
Policy | Setting | Comment
Object Caching Protection | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled
Policy | Setting | Comment
Protection From Zone Elevation | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled
Policy | Setting | Comment
Restrict ActiveX Install | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled
Policy | Setting | Comment
Restrict File Download | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled
Policy | Setting | Comment
Saved from URL | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled
Policy | Setting | Comment
Scripted Window Security Restrictions | Enabled |
groove.exe | Enabled
excel.exe | Enabled
mspub.exe | Enabled
powerpnt.exe | Enabled
pptview.exe | Enabled
visio.exe | Enabled
winproj.exe | Enabled
winword.exe | Enabled
outlook.exe | Enabled
spDesign.exe | Enabled
exprwd.exe | Enabled
msaccess.exe | Enabled
onent.exe | Enabled
mse7.exe | Enabled

MS Security Guide

Policy | Setting | Comment
--- | --- | ---
Block Flash activation in Office documents | Enabled |
Block Flash player in Office | Block embedding/linking, allow other activation

Skype for Business 2016/Microsoft Lync Feature Policies

Policy | Setting | Comment
--- | --- | ---
Configure SIP security mode | Enabled |
Disable HTTP fallback for SIP connection | Enabled |

User Configuration (Disabled)
No settings defined.