Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation'

MittelStufe 1Manuelle Prüfungintune-office

Beschreibung

This policy setting controls whether the Adobe Flash control can be activated by Office documents. Note that activation blocking applies only within Office processes. "Block all activation" prevents the Flash control from being loaded, whether directly referenced by the document or indirectly by another embedded object. The recommended state for this setting is: Enabled: Block all activation. TMAegis could not derive a reliable registry check from the benchmark text, so this recommendation is a manual review item with the audit steps.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Navigate to the UI Path articulated in the Remediation section and confirm it is set as prescribed. This setting is backed by the following registry location with a value of Block all Flash activation. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\office\Common\COM Compatibility\Comment

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

To establish the recommended state via configuration profiles, set the following Settings Catalog path to Enabled: Block all activation. Administrative Templates\MS Security Guide\Block Flash activation in Office documents

Eigenschaften

Betriebssysteme: Beliebig
Tags: intune-officeintunemanual-review
Referenz: CIS Microsoft Intune for Office Benchmark v1.1.0 - 1.1.1.1 Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation'