Microsoft Office restrictions after applying CIS Build Kit for Windows.


Product Name

CIS Build Kits

Product Version

Windows

Date

Dec 13, 2022



Ā 

Problem

After applying part of a Microsoft Build Kit we not longer have access to Microsoft Office applications.

Solution

The cloud-based and non domain joined systems arenā€™t specifically intended to work with the GPOs, however, here are a few options to explore in order resolve this issue.

  1. Please make sure your ADMX templates are fully up to date

  2. Then, if those look good, try the following PowerShell modification. It is highly recommend that this is first attempted on a test machine in your test OU before applying the solution to your Production Environment. How to get around UAC when installing Office365/ 2016

  3. If the PowerShell command does not resolve this concern, there are a number of recommendations within each Windows' Benchmark regarding Office Apps and Program management that can be reviewed and modified to see if this will resolve the matter within your environment.

    1. Search the Benchmark .PDF or .Doc for specific terms and review each Recommendation for applicability and potential modification.

Ā 

You will need to consider the security ramifications of applying or denying a security remediation recommendation.

Ā 

CIS Windows' Build Kits are a collection of GPOs intended for Active Directory deployment. Cloud-based and non domain-joined systems arenā€™t specifically intended to work with the Windows' CIS Build Kits.

Ā 


Copyright Ā© 2020

Center for Internet SecurityĀ®


Ā