Scripts associated with shared folders must be prevented from execution in Outlook.

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
medium	V-223349	SRG-APP-000210	O365-OU-000004	SV-223349r961092_rule	2025-03-05	3

Description
This policy setting controls whether Outlook executes scripts associated with custom forms or folder home pages for shared folders.

ℹ️ Check
Verify the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for shared folders is set to "Enabled". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for sharedfolderscript is set to REG_DWORD = 0, this is not a finding.

ℹ️ Check

Verify the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for shared folders is set to "Enabled". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for sharedfolderscript is set to REG_DWORD = 0, this is not a finding.

✔️ Fix
Set the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for shared folders to "Enabled".