Wiki

Case Status
Log In

Wiki

 
Block all office apps from cre…
  • RSS Feed

Last modified on 9/19/2024 9:01 AM by User.

Tags:

Block all office apps from creating child processes

Disable the following or whitelist CaxtonXPS if possible:

Windows - Security Baseline:
  • Microsoft Defender:
    • 'Block all Office applications from creating child processes'
 
Defender for Endpoint – Security Baseline:
  • Attack Surface Reduction Rules:
    • 'Block Office applications from injecting code into other processes'
    • 'Block Office applications from creating executable content'
    • 'Block all Office applications from creating child processes'

This option can be found in the "User Configuration > Administrative Templates > Microsoft Office [Version] > Security Settings" section of the Group Policy editor.