TMA-INTUNE-OFFICE-1.1.1.1
Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation'
说明
This policy setting controls whether the Adobe Flash control can be activated by Office documents. Note that activation blocking applies only within Office processes. "Block all activation" prevents the Flash control from being loaded, whether directly referenced by the document or indirectly by another embedded object. The recommended state for this setting is: Enabled: Block all activation. TMAegis could not derive a reliable registry check from the benchmark text, so this recommendation is a manual review item with the audit steps.
检查方式
审计方法: 人工审核
此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。
Navigate to the UI Path articulated in the Remediation section and confirm it is set as prescribed. This setting is backed by the following registry location with a value of Block all Flash activation. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\office\Common\COM Compatibility\Comment
修复方式
修复方法: 操作指南或基础设施补丁
To establish the recommended state via configuration profiles, set the following Settings Catalog path to Enabled: Block all activation. Administrative Templates\MS Security Guide\Block Flash activation in Office documents
属性
- 操作系统
- 任意
- 标签
- intune-officeintunemanual-review
- 参考
- CIS Microsoft Intune for Office Benchmark v1.1.0 - 1.1.1.1 Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation'