I'd also add, that allowing macros to be run on demand is not much of an effective defence - unless you have some effective screening of the macro code first. And, if you did, why block the macros?
Steven Harris
Thomas, good points; however, rest assured I was not suggesting to base their security on common sense or technical awareness alone.