STIGUI
V-228471CAT II — Medium severitySV-228471r508021_rule

User Entries to Server List must be disallowed.

Rule version DTOO286 · STIG v2 · 2022-03-11

Discussion

This policy setting controls whether Outlook users can add entries to the list of SharePoint servers when establishing a meeting workspace. If you enable this policy setting, you can choose between two options to determine whether Outlook users can add entries to the published server list: - Publish default, allow others. This option is the default configuration in Outlook. - Publish default, disallow others. This option prevents users from adding servers to the default published server list. If you disable or do not configure this policy setting, when users create a meeting workspace, they can choose a server from a default list provided by administrators or manually enter the address of a server that is not listed. This is the equivalent of Enabled -- Publish default, allow others.

Check

Verify the policy value for User Configuration -> Administrative Templates -> Microsoft Outlook 2016 -> Meeting Workspace "Disable user entries to server list" is set to "Enabled (Publish default, disallow others)".

Procedure: Use the Windows Registry Editor to navigate to the following key:

HKCU\Software\Policies\Microsoft\Office\16.0\meetings\profile

Criteria: If the value ServerUI is REG_DWORD = 2, this is not a finding.

Fix

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Outlook 2016 -> Meeting Workspace "Disable user entries to server list" to "Enabled (Publish default, disallow others)".

Identifiers

Group ID
V-228471
Group title
SRG-APP-000141
Rule ID
SV-228471r508021_rule
Check ID
C-30704r497735_chk
Fix ID
F-30689r497736_fix