-
Notifications
You must be signed in to change notification settings - Fork 128
Office 365ProPlus 3.4
MrAutomater edited this page Feb 27, 2026
·
1 revision
Title: Microsoft Office 365 ProPlus Security Technical Implementation Guide
Version: 3
Release: Release: 4 Benchmark Date: 01 Oct 2025 3.5.2 1.10.0
FileName: U_MS_Office_365_ProPlus_STIG_V3R4_Manual-xccdf.xml
Created: 12/2/2025
Description: This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.
Total Stig Rule Coverage: 133 of 146 rules are automated; 91%
- High (CAT I): 1 of 1 rules are automated
- Medium (CAT II): 132 of 145 rules are automated
- Low (CAT III): 0 of 0 rules are automated
| StigRuleId | Severity | RuleType | DscResource | DuplicateOf |
|---|---|---|---|---|
| V-223280 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223281 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223282 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223284 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223285 | High | RegistryRule | RegistryPolicyFile | |
| V-223286 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223287 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223288 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223289 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223290 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223291 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223292 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223293 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223294 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223295 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223309 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223310 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223311 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223312 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223313 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223314 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223315 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223316 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223317 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223318 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223319 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223320 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223321 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223322 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223323 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223324 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223325 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223326 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223327 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223328 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223329 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223330 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223331 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223332 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223333 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223334 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223335 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223336 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223337 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223338 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223339 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223340 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223341 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223342.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-223342.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-223343 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223344 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223345 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223346 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223347 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223348 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223349 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223350 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223351 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223352 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223353 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223354 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223355 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223356 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223357 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223358 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223359 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223360 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223361 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223362 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223363 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223364 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223365 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223366 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223367 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223368 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223369 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223370 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223371 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223372 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223373 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223374 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223375 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223376 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223377 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223378 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223379 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223380 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223381 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223382 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223383 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223384 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223385 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223386 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223387 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223388.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-223388.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-223389 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223390 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223391 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223392 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223393 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223394 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223395 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223396 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223397 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223398 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223399 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223400 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223401 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223402 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223403 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223404.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-223404.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-223405 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223406 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223407 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223408 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223409 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223410 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223411 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223412 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223413 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223414 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223415 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223416 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223417 | Medium | RegistryRule | RegistryPolicyFile | |
| V-223418 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278355 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278356 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278357 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278358 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278359 | Medium | RegistryRule | RegistryPolicyFile |
| StigRuleId | Severity | RuleType |
|---|---|---|
| V-223296 | Medium | DocumentRule |
| V-223297 | Medium | DocumentRule |
| V-223298 | Medium | DocumentRule |
| V-223299 | Medium | DocumentRule |
| V-223300 | Medium | DocumentRule |
| V-223301 | Medium | DocumentRule |
| V-223302 | Medium | DocumentRule |
| V-223303 | Medium | DocumentRule |
| V-223304 | Medium | DocumentRule |
| V-223305 | Medium | DocumentRule |
| V-223306 | Medium | DocumentRule |
| V-223307 | Medium | DocumentRule |
| V-223308 | Medium | DocumentRule |
-
Stig Coverage
- Stig Coverage Summary
- Adobe-AcrobatPro-2.1
- Adobe-AcrobatReader-1.6
- Adobe-AcrobatReader-2.1
- DotNetFramework-4-2.6
- DotNetFramework-4-2.7
- FireFox-All-6.6
- FireFox-All-6.7
- Google-Chrome-2.10
- Google-Chrome-2.11
- IISServer-10.0-3.5
- IISServer-10.0-3.6
- IISSite-10.0-2.13
- IISSite-10.0-2.14
- InternetExplorer-11-2.5
- InternetExplorer-11-2.6
- MS-Edge-2.3
- MS-Edge-2.4
- Office-365ProPlus-3.3
- Office-365ProPlus-3.4
- Office-Access2016-1.1
- Office-Access2016-2.1
- Office-Excel2016-1.2
- Office-Excel2016-2.2
- Office-OneNote2016-1.2
- Office-OneNote2016-2.1
- Office-Outlook2016-2.3
- Office-Outlook2016-2.4
- Office-PowerPoint2016-1.1
- Office-PowerPoint2016-2.1
- Office-Publisher2016-1.3
- Office-Publisher2016-2.1
- Office-Skype2016-1.1
- Office-Skype2016-2.1
- Office-System2016-2.4
- Office-System2016-2.5
- Office-Word2016-1.1
- Office-Word2016-2.1
- OracleLinux-8-2.3
- OracleLinux-8-2.4
- OracleLinux-9-1.1
- RHEL-7-3.14
- RHEL-7-3.15
- RHEL-9-2.3
- RHEL-9-2.7
- SqlServer-2016-Instance-3.5
- SqlServer-2016-Instance-3.6
- SqlServer-2022-Instance-1.2
- SqlServer-2022-Instance-1.3
- Ubuntu-18.04-2.14
- Ubuntu-18.04-2.15
- WindowsClient-10-3.5
- WindowsClient-10-3.6
- WindowsClient-11-2.5
- WindowsClient-11-2.6
- WindowsDefender-All-2.6
- WindowsDefender-All-2.7
- WindowsDnsServer-2012R2-2.5
- WindowsDnsServer-2012R2-2.7
- WindowsFirewall-All-2.1
- WindowsFirewall-All-2.2
- WindowsServer-2016-DC-2.10
- WindowsServer-2016-DC-2.9
- WindowsServer-2016-MS-2.10
- WindowsServer-2016-MS-2.9
- WindowsServer-2019-DC-3.6
- WindowsServer-2019-DC-3.7
- WindowsServer-2019-MS-3.6
- WindowsServer-2019-MS-3.7
- WindowsServer-2022-DC-2.6
- WindowsServer-2022-DC-2.7
- WindowsServer-2022-MS-2.6
- WindowsServer-2022-MS-2.7