Solved

Disable Office macros in medium-sized domain environment WITHOUT using Group Policy

Posted on 2016-09-15
5
18 Views
Last Modified: 2016-11-04
A customer of ours is having security issues because users are allowed to enable and run Office macros (and are easily tricked into doing so by malware or instructions in spam messages).  

Ordinarily, I would just disable macros across their domain using Group Policy.  However, this customer opted to purchase retail/small business editions of Office in nearly all cases, and using GP to control non-volume licensed MS Office is not supported.  

They have Office 2007, 2010, and 2013 scattered across 75 or so PCs, shared by 150+ users.  In other words, touching each PC to do this manually is basically impractical.

Is there some other, centralized/automated way to control macro behavior?  How would you suggest we solve this problem?
0
Comment
Question by:AA-in-CA
  • 3
5 Comments
 
LVL 53

Assisted Solution

by:McKnife
McKnife earned 250 total points (awarded by participants)
ID: 41800259
Office 2010 can be controlled by GPOs in any edition, so can 2007. 2013 can be controlled using self-built administrative templates. It wasn't before 2016 that Microsoft crippled even that in order to make more money. Maybe you can find those admx to download somewhere (note: I am not talking about microsoft's non-working admx). Else, you'll need to identify the corresponding registry values and deploy those using group policy preferences.
1
 
LVL 14

Accepted Solution

by:
DrTribos earned 250 total points (awarded by participants)
ID: 41800948
This MS article basically covers how to do it via the registry.  So you could write a script to do it.

Lets just hope your clients users receive a script to undo the changes ;-0

https://blogs.technet.microsoft.com/diana_tudor/2014/12/02/microsoft-project-how-to-control-macro-settings-using-registry-keys/
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41866115
Both comments would suggest a registry edit. I recommend a split.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41873630
Splitting.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Microsoft Office Picture Manager was included in Office 2003, 2007, and 2010, but not in Office 2013. Users had hopes that it would be in Office 2016/Office 365, but it is not. Fortunately, the same zero-cost technique that works to install it with …
Entering a date in Microsoft Access can be tricky. A typo can cause month and day to be shuffled, entering the day only causes an error, as does entering, say, day 31 in June. This article shows how an inputmask supported by code can help the user a…
This video shows the viewer how to set up and create Footnotes in their document. Click on the References tab: Select "Insert Footnote": Type in desired text:
This video shows where to find templates, what they are used for, and how to create and save a custom template using Microsoft Word.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now