Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 851098" data-attributes="member: 32260">If you do not use H_C and ConfigureDefender, then you can tweak Office applications or use Windows Policies to:<ol>
<li data-xf-list-type="ol">Disable macros (Word, Excel, PowerPoint, Access, Publisher, Outlook).</li>
<li data-xf-list-type="ol">Disable access to Visual Basic Object Model (Access, Excel, PowerPoint, Word).</li>
<li data-xf-list-type="ol">Disable auto-update for any linked fields (including DDE and OLE in Word, Excel, Outlook, OneNote).</li>
<li data-xf-list-type="ol">Disable ActiveX (Word, Excel, PowerPoint).</li>
<li data-xf-list-type="ol">Disable OLE (Word, Excel, PowerPoint).</li>
<li data-xf-list-type="ol">Disable ‘RunPrograms’ option for action buttons in PowerPoint.</li>
<li data-xf-list-type="ol">Disable automatic download of linked images in PowerPoint.</li>
<li data-xf-list-type="ol">Disable TrustBar notifications in (Word, Excel, PowerPoint).</li>
</ol>All of this can be also done via Documents Anti-Exploit tool available on:[URL unfurl=&quot;true&quot;]https://github.com/AndyFul/Hard_Configurator[/URL]This tool uses most of the policies included in the :[URL unfurl=&quot;true&quot;]https://www.cyber.gov.au/publications/hardening-microsoft-office-365-proplus-office-2019-and-office-2016[/URL]</blockquote>

[QUOTE="Andy Ful, post: 851098, member: 32260"] If you do not use H_C and ConfigureDefender, then you can tweak Office applications or use Windows Policies to: [LIST=1] [*]Disable macros (Word, Excel, PowerPoint, Access, Publisher, Outlook). [*]Disable access to Visual Basic Object Model (Access, Excel, PowerPoint, Word). [*]Disable auto-update for any linked fields (including DDE and OLE in Word, Excel, Outlook, OneNote). [*]Disable ActiveX (Word, Excel, PowerPoint). [*]Disable OLE (Word, Excel, PowerPoint). [*]Disable ‘RunPrograms’ option for action buttons in PowerPoint. [*]Disable automatic download of linked images in PowerPoint. [*]Disable TrustBar notifications in (Word, Excel, PowerPoint). [/LIST] All of this can be also done via Documents Anti-Exploit tool available on: [URL unfurl="true"]https://github.com/AndyFul/Hard_Configurator[/URL] This tool uses most of the policies included in the : [URL unfurl="true"]https://www.cyber.gov.au/publications/hardening-microsoft-office-365-proplus-office-2019-and-office-2016[/URL] [/QUOTE]

Verification