Notify antivirus programs when opening attachmentsID: oval:org.secpod.oval:def:27576 | Date: (C)2015-10-08 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
Antivirus programs are mandatory in many environments and provide a strong defense against attack.
The Notify antivirus programs when opening attachments setting allows you to manage how registered antivirus programs are notified. When enabled, this policy setting configures Windows to call the registered antivirus program and have it scan file attachments when they are opened by users. If the antivirus scan fails, the attachments are blocked from being opened. If this policy setting is disabled, Windows does not call the registered antivirus program when file attachments are opened. To help ensure that virus scanners examine every file before it is opened, Microsoft recommends that this policy setting be configured to Enabled in all environments.
Note An updated antivirus program must be installed for this policy setting to function properly.
Fix:
(1) GPO: User Configuration\Administrative Templates\Windows Components\Attachment Manager!Antivirus programs are mandatory in many environments and provide a strong defense against attack.
(2) REG: HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!ScanWithAntiVirus
Platform: |
Microsoft Windows Server 2012 R2 |