microsoft roll out macro security

[Chad]

I'm an IT tech. I assumed (wrongly) that the save my settings wizard would
also save the changes I made to the macro security level. In actuallity,
when you restore your settings with the restore part of the save my settings
wizard, it resets all macro security levels to high.

Does anyone know if there is a microsoft answer to this problem? Otherwise
the only way I can think of to turn this into a simple solution for rollout
of new computers is to create a whole bunch of registry keys and wrap them up
in a batch file execute that I then run after I run the save my settings
wizard, which I use to turn off all the annoying stuff microsoft is including
with their software, like that startup task pane as well as redirect the file
locations for saves and templates.

 

[Chad]

Ok, so I'll reply to my own question and clarify. I'm looking for an
hkey_local_machine security registry key for office 2003. I've read in the
resource book that it exists, but when locating that region in the registry,
there is no security folder under each application. I also have not found a
place where you change the setting from 11 to 9 or 4 to 2 or anything like
that.

Anyone?

 

[Chad]

Again, I reply to my own posting. It seems there isn't help to be found out
there among all those Microsoft professionals.
As fas as I can see there is not an HKEY_LOCALMACHINE registry key for macro
security.

At the CURRENT_USER level there are. As noted before I had trouble finding
these keys. I thought about creating them, but thought an easier answer
would be to just go in and change the settings in each office application on
my computer. Doing so created the key. If you then export the registry for
the entire microsoft folder, you will capture all the registry keys for all
the office programs you've reset the macrosecurity on. Then simply run the
registry key on each computer.

The downside, you have to run it for every user that logs on since it is a
LOCAL_USER registry key. The plus side, if you use active directory, it can
be taken care of at logon.

 

[Harlan Grove]

Chad wrote...

Again, I reply to my own posting. It seems there isn't help to be found out
there among all those Microsoft professionals.

This is a peer-to-peer newsgroup. Few Microsoft employees read much
less respond in this newsgroup. If you mean MVPs, they're not
necessarily systems administrators.

As fas as I can see there is not an HKEY_LOCALMACHINE registry key for macro
security.

....

And there shouldn't be on putatively multiuser systems. Each user
should be able to have different macro security levels.

If you mean that you want a default macro security level different than
factory settings, then, as you've pointed out, use an installation
batch file. There are likely to be other settings that would need to be
specified on first login.

The downside, you have to run it for every user that logs on since it is a
LOCAL_USER registry key. The plus side, if you use active directory, it can
be taken care of at logon.

'LOCAL_USER'? Do you mean 'CURRENT_USER'?

You could take care of it just by putting a shortcut to a batch file in
the Default User profile's Startup folder and add a command at the end
of the batch file to delete the shortcut in the actual user's Startup
folder (inherited from the Default User profile on first login).