Windows 10: Blocking Flash, Shockwave, Silverlight controls activating in Office

Brink · May 14, 2018

Today we are announcing an upcoming change to Office that blocks activation of Flash, Shockwave and Silverlight controls within Office.

We are taking this step based on the following factors:

Use of some these controls in exploit campaigns to target end users of Office.

Low observed use of these controls within Office.

Upcoming end of support for some these components

On July 2017, Adobe announced that Flash will no longer be supported after 2020. Major browsers including Edge, Chrome, Safari and Firefox have announced their respective roadmaps for ending support for Flash.

Silverlight is expected to reach end of support in 2021 with support for several browsers and OS platforms already ended in 2016.

Note: This change only applies to Office 365 subscription clients. It will not apply to Office 2016, Office 2013 or Office 2010.

Customers who wish to enforce this behavior now in Office 365 subscription clients or in Office 2016 perpetual and down level versions can use the guidance published here to block controls targeted by this change.

Furthermore, customers can also take advantage of the recently published Security Baseline for Office 2016 that includes a custom Group Policy that blocks Flash.

What does this update block?

This change blocks the activation of the following controls within the Office process.

Control CLSID Flash D27CDB6E-AE6D-11CF-96B8-444553540000
D27CDB70-AE6D-11CF-96B8-444553540000 Shockwave 233C1507-6A77-46A4-9443-F871F945D258 Silverlight DFEAF541-F3E1-4c24-ACAC-99C30715084A
Some examples of scenarios that would be impacted by this change are:

Controls directly embedded in an Office document, for example, Flash video directly embedded within a PowerPoint document using the Insert Object functionality

Controls invoked by extensibility components within the Office process, for example, Power View add-in that uses Silverlight

Note: this change does not cover scenarios where these controls are activated outside the Office process, for example, a Flash video inserted into a document via the Insert Online Video functionality.

When would this block take effect?

This change only applies to Office 365 subscription clients and is targeted to take effect in the following order

Controls are blocked in Office 365 Monthly Channel starting in June 2018.

Controls are blocked in Office 365 Semi Annual Targeted (SAT) Channel starting in September 2018.

Controls are blocked in Office 365 Semi Annual (SA) Channel starting in January 2019.

Can I unblock these controls if I need to?

Yes. While we are confident that this will not impact most Office users, we do understand there is potential to impact some of our users and we apologize for the inconvenience caused as a result.

Please refer to support guidance published here if you need to unblock controls critical to your workflow.

In closing, we believe this is another step forward in elevating the security of Office. One that protects our users from malicious attacks without disrupting day to day productivity for most of them.
Click to expand...

Source: Blocking Flash, Shockwave, Silverlight controls from activating in Office Applications for Security - Microsoft Tech Community - 191729

:)

Niranjan Manjhi · May 14, 2018

youtube with in Windows 10

Hi Alan,

Try the following and check.

We need to make sure that the necessary Add-ons are enabled in Internet Explorer, to do this follow the steps below:

a. Open
Internet Explorer for the desktop.

b. Tap or click the
Tools button, and then tap or click Manage add-ons.

c. From the
Show dropdown selection, select Run without Permissions.

Look for the following add-ons in the displayed list and make sure the Status is listed as
Enabled

Note: when checking to see if the add-on is installed you can also verify the current version of the add-on.

The add-on for Microsoft Silverlight is listed as:

. Microsoft Silverlight

The add-ons for Adobe Flash and Adobe Shockwave Player are listed as:

· Shockwave Active X Control

· Shockwave Flash Object

The add-on for Java is listed as:

· Java Plug-in (May be multiple add-ons)

Hope this helps.

Pawan Dhondiyal · May 14, 2018

Websites consider my laptop as a mobile device

Hi,

Thanks you for posting your reply and update.

Meanwhile you can also Clear the cache and the cookies from websites that cause problems.
You will need to make sure that the necessary Add-ons are enabled in Internet Explorer, to do this follow the steps below:

a. Start Internet Explorer and click the Tools icon and then click Internet Options

b. Click the Programs Tab and click the Manage add-ons button

c. From the Show dropdown selection, select Run without Permissions

Look for the following add-ons in the displayed list and make sure the Status is listed as Enabled

Note: When checking to see if the add-on is installed you can also verify the current version of the add-on.

The add-on for Microsoft Silverlight is listed as Microsoft Silverlight

•Install the latest version of Silverlight and then make sure Silverlight is enabled in Internet Explorer.

•If you need to uninstall and then reinstall Silverlight visit the Get

Microsoft Silverlight website and click the Uninstall Silverlight tab

•For help with Silverlight issues, visit the Silverlight Community website

The add-ons for Adobe Flash and Adobe Shockwave Player are listed as Shockwave Active X Control and Shockwave Flash Object

•Update to the latest version of Adobe Flash

•In some cases it may be necessary to uninstall Adobe Flash from your installed programs list and then reinstall the latest version

•For help with Adobe Flash issues, visit the Adobe Flash Help and Support website

•Update to the latest version of Adobe Shockwave

•In some cases it may be necessary to uninstall Adobe Shockwave Player from your installed programs list and then reinstall the latest version

•For help with Adobe Shockwave issues, visit the Adobe Shockwave Player Help and Support website

The add-on for Java is listed as Java Plug-in (May be multiple add-ons).

•Make sure you have the latest version of Java installed

•In some cases it may be necessary to uninstall Java from your installed programs list and then reinstall the latest version

•For help with Java issues, visit the Java Help Center website

Java Help Center

You can also refer to the following Microsoft article for more information.

Videos won't play or webpages don't display correctly

http://windows.microsoft.com/en-IN/internet-explorer/videos-dont-work#ie=ie-11

Hope this information is helpful. Please do let us know if you need further assistance, we’ll be glad to assist you.

Windows 10: Blocking Flash, Shockwave, Silverlight controls activating in Office

Blocking Flash, Shockwave, Silverlight controls activating in Office

Blocking Flash, Shockwave, Silverlight controls activating in Office

Blocking Flash, Shockwave, Silverlight controls activating in Office - Similar Threads - Blocking Flash Shockwave

shockwave

shockwave

shockwave

Cannot Stop Repeated User Account Control Message for Shockwave

Shockwave flash player isn't working on my pc

silverlight

Silverlight 5 Blocked

Silverlight

Chrome and Shockwave Flash