TMA-INTUNE-OFFICE-1.1.1.1

Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation'

SrednjaNivo 1Ručni pregledintune-office

Opis

This policy setting controls whether the Adobe Flash control can be activated by Office documents. Note that activation blocking applies only within Office processes. "Block all activation" prevents the Flash control from being loaded, whether directly referenced by the document or indirectly by another embedded object. The recommended state for this setting is: Enabled: Block all activation. TMAegis could not derive a reliable registry check from the benchmark text, so this recommendation is a manual review item with the audit steps.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Navigate to the UI Path articulated in the Remediation section and confirm it is set as prescribed. This setting is backed by the following registry location with a value of Block all Flash activation. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\office\Common\COM Compatibility\Comment

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

To establish the recommended state via configuration profiles, set the following Settings Catalog path to Enabled: Block all activation. Administrative Templates\MS Security Guide\Block Flash activation in Office documents

Svojstva

Operativni sistemi: Bilo koji
Oznake: intune-officeintunemanual-review
Referenca: CIS Microsoft Intune for Office Benchmark v1.1.0 - 1.1.1.1 Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation'