The ability of the Office Telemetry Agent to periodically upload telemetry data to a shared folder must be disabled.

From Microsoft Office System 2013 STIG

Part of DTOO415 - Data upload for Office Telemetry Agent

Associated with: CCI-000381

SV-53217r3_rule The ability of the Office Telemetry Agent to periodically upload telemetry data to a shared folder must be disabled.

Vulnerability discussion

Office Telemetry is a new compatibility monitoring framework. When an Office document or solution is loaded, used, closed, or raises an error in certain Office 2013 applications, the Office Telemetry application adds a record about the event to a local data store. Each record includes a description of the problem and a link to more information. Inventory and usage data is also tracked. The actual logging capability will be enabled, but this policy allows that data to be uploaded to a remote location which, if enabled, could pass information about the internal network and configuration to that remote site.

Check content

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Telemetry Dashboard >> "Turn on data uploading for Office Telemetry Agent" is set to "Disabled". Use the Windows Registry Editor to navigate to the following hive: HKEY_Users For every users profile hive under HKEY_Users, navigate to the following key: \software\policies\Microsoft\office\15.0\osm If the value “enableupload” for every user profile hive is REG_DWORD = 0, this is not a finding.

Fix text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Telemetry Dashboard >> "Turn on data uploading for Office Telemetry Agent" to "Disabled".

Pro Tips

Powered by sagemincer