But what are they actually doing? Are they protecting you from ransomware, or are they silently breaking your archival workflow? Let’s open the hood. Unlike macro security (which looks at code inside a file) or Protected View (which looks at where the file came from ), File Block Settings look at the file’s container type .
| File Type | Extension | Risk Level | Recommended Action | | :--- | :--- | :--- | :--- | | | .xlm | Critical | Hard Block (Open & Save) | | Word 2 / Word 6.0 | .doc (pre-97) | High | Hard Block | | Excel 95 Workbooks | .xls (pre-97) | High | Hard Block | | PowerPoint 95 | .ppt (pre-97) | Medium | Protected View | | Web Pages | .htm , .html | Medium | Block Open (they trigger scripts) | Group Policy: Managing at Scale The worst way to manage File Block Settings is by walking to each desk. The best way is via Group Policy Administrative Templates (ADMX/ADML).
The relevant policies live under: User Configuration > Policies > Administrative Templates > Microsoft [App] 2016 > Security > Trust Center > File Block Settings
But what are they actually doing? Are they protecting you from ransomware, or are they silently breaking your archival workflow? Let’s open the hood. Unlike macro security (which looks at code inside a file) or Protected View (which looks at where the file came from ), File Block Settings look at the file’s container type .
| File Type | Extension | Risk Level | Recommended Action | | :--- | :--- | :--- | :--- | | | .xlm | Critical | Hard Block (Open & Save) | | Word 2 / Word 6.0 | .doc (pre-97) | High | Hard Block | | Excel 95 Workbooks | .xls (pre-97) | High | Hard Block | | PowerPoint 95 | .ppt (pre-97) | Medium | Protected View | | Web Pages | .htm , .html | Medium | Block Open (they trigger scripts) | Group Policy: Managing at Scale The worst way to manage File Block Settings is by walking to each desk. The best way is via Group Policy Administrative Templates (ADMX/ADML). file block settings in the trust center
The relevant policies live under: User Configuration > Policies > Administrative Templates > Microsoft [App] 2016 > Security > Trust Center > File Block Settings But what are they actually doing
