Trusted Location on network

Question

Hi

I set up a trusted location for macros to a folder on the nework and it works under my login (e.g. does not ask me to enable content) but still prompts me to enable macro content if I log in as a different user.    Does this have to be done on each workstation/login or is there a way to push this out from my server?

thanks for any information!

Craig

Answer 1

Jeeped:

This appears to be the only way I can get a message to you.

You made a suggestion about one of my Wiki entries. But when I click on the link it is "404 not found".  Can you make your suggestion as a comment on the wiki so I can see it.

http://answers.microsoft.com/en-us/office/wiki/office\_mobile-word/justification-in-word/95336eff-355f-42cb-b354-bfad532b8325

Thanks

Answer 2

I may have misinterpreted your situation. If you are trying to avoid allowing the trust relationship for that network folder (on an active directory structured domain) for dozens (hundreds?) of computers individually, then you should be looking into Group Policies. This involves the Office Customization Tool (OCT) and the Group Policy Object Editor. This should allow the 'trust push' you originally referred to.

Configure trusted locations and trusted publishers settings in the 2007 Office system

Use New Group Policy Settings to Manage Office 2010

I think this is closer to what you are looking for. For creating and managing domain-based Group Policies, you will have to be a member of Domain Admins, Enterprise Admins, or Group Policy Creator Owners.

Answer 3

When I follow the instructions on Microsoft’s site and ran the program selfcert.exe tool I got a window that seems to say that it is for one computer only.

They have a link for commercial certificate authorities though.   Should I purchase a certificate from one of the authorities? 

If so, how do I go about applying it to a folder so I can store files with macros in this folder so anyone who can get to these files will not have to click enable content to run the macros?

thank you very much

Answer 4

Thank you so much!!

Answer 5

The 'trust' must come from each workstation/login. You cannot 'push' a trust. To take this to an extreme, it would be the equivalent of a web site forcing 'trusted' malware on a user without the user's consent. If you have a number of these, consider setting up a self-certification and a 'Trusted Publisher' with SelfCert.exe.

OFF2000: Using SelfCert to Create a Digital Certificate for VBA Projects

Sign your own macros for stronger security

Digitally sign a macro project