Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available

DoD Outlook 2016 STIG User v2r3
Data collected on: 1/14/2025 12:42:58 PM |

General
Details

Domain | security.local
Owner | SECURITY\Domain Admins
Created | 3/15/2022 5:43:16 PM
Modified | 3/15/2022 7:28:52 PM
User Revisions | 6 (AD), 6 (SYSVOL)
Computer Revisions | 1 (AD), 1 (SYSVOL)
Unique ID | {C4BEAF29-E2D7-4B90-AF5A-9755A1CAA222}
GPO Status | Computer settings disabled

Links

Location | Enforced | Link Status | Path
--- | --- | --- | ---
None

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:

Name
NT AUTHORITY\Authenticated Users

Delegation
These groups and users have the specified permission for this GPO

Name | Allowed Permissions | Inherited
--- | --- | ---
NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No
NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No
SECURITY\Domain Admins | Edit settings, delete, modify security | No
SECURITY\Enterprise Admins | Edit settings, delete, modify security | No

Computer Configuration (Disabled)
No settings defined.
User Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local computer.
Microsoft Outlook 2016/Account Settings/Exchange

Policy | Setting | Comment
--- | --- | ---
Authentication with Exchange Server | Enabled |
Select the authentication with Exchange server. | Kerberos Password Authentication
Policy | Setting | Comment
Enable RPC encryption | Enabled |

Microsoft Outlook 2016/Account Settings/Internet Calendars

Policy | Setting | Comment
--- | --- | ---
Automatically download attachments | Disabled |
Do not include Internet Calendar integration in Outlook | Enabled |

Microsoft Outlook 2016/Account Settings/RSS Feeds

Policy | Setting | Comment
--- | --- | ---
Automatically download enclosures | Disabled |
Download full text of articles as HTML attachments | Disabled |

Microsoft Outlook 2016/Meeting Workspace

Policy | Setting | Comment
--- | --- | ---
Disable user entries to server list | Enabled |
Check to disable users from adding entries to server list | Publish default, disallow others

Microsoft Outlook 2016/Outlook Options

Policy | Setting | Comment
--- | --- | ---
Internet and network paths into hyperlinks | Disabled |

Microsoft Outlook 2016/Outlook Options/Mail Format/Internet Formatting

Policy | Setting | Comment
--- | --- | ---
Outlook Rich Text options | Enabled |
Use this format: | Convert to Plain Text format

Microsoft Outlook 2016/Outlook Options/Mail Format/Internet Formatting/Message Format

Policy | Setting | Comment
--- | --- | ---
Set message format | Enabled |
Use the following format for e-mail messages: | Plain Text

Microsoft Outlook 2016/Outlook Options/Other/Advanced

Policy | Setting | Comment
--- | --- | ---
Do not allow Outlook object model scripts to run for public folders | Enabled |
Do not allow Outlook object model scripts to run for shared folders | Enabled |

Microsoft Outlook 2016/Outlook Options/Preferences/Calendar Options/Office.com Sharing Service

Policy | Setting | Comment
--- | --- | ---
Access to published calendars | Enabled |
Prevent publishing to a DAV server | Enabled |
Prevent publishing to Office.com | Enabled |
Restrict level of calendar details users can publish | Enabled |
| Disables 'Full details' and 'Limited details'

Microsoft Outlook 2016/Outlook Options/Preferences/E-mail Options

Policy | Setting | Comment
--- | --- | ---
Read e-mail as plain text | Enabled |
Read signed e-mail as plain text | Enabled |

Microsoft Outlook 2016/Security

Policy | Setting | Comment
--- | --- | ---
Allow Active X One Off Forms | Enabled |
Sets which ActiveX controls to allow.
| Load only Outlook Controls
Policy | Setting | Comment
Configure Add-In Trust Level | Enabled |
Select Add-In Trust Level:
| Trust all loaded and installed COM addins
Policy | Setting | Comment
Disable 'Remember password' for Internet e-mail accounts | Enabled |
Prevent users from customizing attachment security settings | Enabled |
Prompt user to choose security settings if default settings fail | Disabled |

Microsoft Outlook 2016/Security/Automatic Picture Download Settings

Policy | Setting | Comment
--- | --- | ---
Automatically download content for e-mail from people in Safe Senders and Safe Recipients Lists | Disabled |
Block Trusted Zones | Enabled |
Display pictures and external content in HTML e-mail | Enabled |
Do not permit download of content from safe zones | Disabled |
Include Internet in Safe Zones for Automatic Picture Download | Disabled |
Include Intranet in Safe Zones for Automatic Picture Download | Disabled |

Microsoft Outlook 2016/Security/Cryptography

Policy | Setting | Comment
--- | --- | ---
Do not check e-mail address against address of certificates being used | Enabled |
Message Formats | Enabled |
Support the following message formats: | S/MIME
Policy | Setting | Comment
Minimum encryption settings | Enabled |
Minimum key size (in bits): | 168
Policy | Setting | Comment
Replies or forwards to signed/encrypted messages are signed/encrypted | Enabled |
Run in FIPS compliant mode | Enabled |
S/MIME interoperability with external clients: | Enabled |
Behavior for handling S/MIME messages: | Handle internally
Policy | Setting | Comment
S/MIME receipt requests behavior | Enabled |
Handle messages with S/MIME receipt requests in the following manner: | Never send S/MIME receipts
Policy | Setting | Comment
Send all signed messages as clear signed messages | Enabled |

Microsoft Outlook 2016/Security/Cryptography/Signature Status dialog box

Policy | Setting | Comment
--- | --- | ---
Retrieving CRLs (Certificate Revocation Lists) | Enabled |
| When online always retreive the CRL

Microsoft Outlook 2016/Security/Security Form Settings

Policy | Setting | Comment
--- | --- | ---
Outlook Security Mode | Enabled |
Outlook Security Policy: | Use Outlook Security Group Policy

Microsoft Outlook 2016/Security/Security Form Settings/Attachment Security

Policy | Setting | Comment
--- | --- | ---
Display Level 1 attachments | Disabled |
Remove file extensions blocked as Level 1 | Disabled |
Remove file extensions blocked as Level 2 | Disabled |

Microsoft Outlook 2016/Security/Security Form Settings/Custom Form Security

Policy | Setting | Comment
--- | --- | ---
Allow scripts in one-off Outlook forms | Disabled |
Set Outlook object model custom actions execution prompt | Enabled |
When executing a custom action: | Automatically Deny

Microsoft Outlook 2016/Security/Security Form Settings/Programmatic Security

Policy | Setting | Comment
--- | --- | ---
Configure Outlook object model prompt when accessing an address book | Enabled |
Guard behavior: | Automatically Deny
Policy | Setting | Comment
Configure Outlook object model prompt When accessing the Formula property of a UserProperty object | Enabled |
Guard behavior: | Automatically Deny
Policy | Setting | Comment
Configure Outlook object model prompt when executing Save As | Enabled |
Guard behavior: | Automatically Deny
Policy | Setting | Comment
Configure Outlook object model prompt when reading address information | Enabled |
Guard behavior: | Automatically Deny
Policy | Setting | Comment
Configure Outlook object model prompt when responding to meeting and task requests | Enabled |
Guard behavior: | Automatically Deny
Policy | Setting | Comment
Configure Outlook object model prompt when sending mail | Enabled |
Guard behavior: | Automatically Deny

Microsoft Outlook 2016/Security/Security Form Settings/Programmatic Security/Trusted Add-ins

Policy | Setting | Comment
--- | --- | ---
Configure trusted add-ins | Disabled |

Microsoft Outlook 2016/Security/Trust Center

Policy | Setting | Comment
--- | --- | ---
Allow hyperlinks in suspected phishing e-mail messages | Disabled |
Security setting for macros | Enabled |
Security Level | Warn for signed, disable unsigned