troubleshooting Question

Using GPO to disable Macros on Office files except from File Servers

Avatar of ejscn
ejscnFlag for United States of America asked on
Windows Server 2012IT AdministrationOS Security
5 Comments1 Solution8670 ViewsLast Modified:

I am trying to disable macros from running in Office programs using group policy.  I have a policy set up with the following settings:

Policies/Administrative Templates/Microsoft Excel 2013/Excel Options/Security/Trust Center/VBA Macro notification Settings: Enabled: Disable all except digitally signed macros
(This is also set for Word 2013 and PowerPoint 2013.)
Policies/Administrative Templates/Microsoft Office 2013/Security Settings/Trust Center: Trusted Location #1:
Path: \\fileserver\
Date: 2016-03-24 (the date I created this policy to test)
Description: Any File on FILESERVER
Allow sub folders: enabled
(I have similar trusted locations set for all of our file servers.)

Based on what I read, it seems like this should disable all macros except for those from files on one of our file servers.  I tested this, and the macros on a shared Excel spreadsheet were blocked.  Now, this was a .xls file (not the newer format) - not sure if that makes any difference.  Please let me know what I'm missing here.  Thanks in advance for your help.
btanExec Consultant
Join our community to see this answer!
Unlock 1 Answer and 5 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 5 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros