Excel Macro Security Problem - Trusted macros not running for users (but do run for domain admins)

Discussion in 'Windows Small Business Server' started by Alan, Jan 22, 2007.

  1. Alan

    Alan Guest

    Hi All,

    We have a slightly odd situation that I cannot understand.

    *Background*

    We are running Excel 2000 and have been for many years. We have a
    number of excel files with macros signed with a local certificate, and
    macro security is set to high.

    These files opened and ran the macros fine.


    *Recently*

    We have just upgraded Outlook 2000 to Outlook 2003.

    It appears that in doing that update, macros in Excel will no longer
    work - they are all disabled even for 'medium security' settings (low
    security allows the macros to run).

    If we make the user a domain admin then everything works fine.

    If we then subsequently take the user back to a standard user,
    everything works fine still.


    *Issue*

    We don't really want to have to go around each individual user,
    elevate their rights, run OL and Excel, and then reduce their rights
    again - that would take ages and would be a major pain for the users
    too.

    I am hoping that someone might know if there is some registry key (or
    other location) that the users need to have write permissions to make
    this work? If so, we can more easily deploy a permission change on
    that key using GP or a login script or similar.


    Thanks in advance for any help you can provide,
    --
    Alan.

    The views expressed are my own, and not those of my employer or anyone
    else associated with me.

    My current valid email address is:



    This is valid as is. It is not munged, or altered at all.

    It will be valid for AT LEAST one month from the date of this post.

    If you are trying to contact me after that time,
    it MAY still be valid, but may also have been
    deactivated due to spam. If so, and you want
    to contact me by email, try searching for a
    more recent post by me to find my current
    email address.

    The following is a (probably!) totally unique
    and meaningless string of characters that you
    can use to find posts by me in a search engine:

    ewygchvboocno43vb674b6nq46tvb
     
    Alan, Jan 22, 2007
    #1
    1. Advertisements

  2. Hello Alan,

    Thank you for posting here.

    From the post, I understand you have problem about Excel macro security
    problem. After Outlook 2000 to Outlook 2003, you can not run Excel macro.

    If this is your concern, please repost your issue in Excel newsgroup for
    further assistance.

    This newsgroup is primarily for issues involving deployment, configuration,
    consultation and troubleshooting. The reason why we recommend posting
    appropriately is you will get the most qualified pool of respondents, and
    other partners who read the newsgroups regularly can either share their
    knowledge or learn from your interaction with us.

    Excel Newsgroup: microsoft.public.excel

    I hope the information above is helpful.

    If there is anything else I can do for you, feel free to let me know.

    Thanks and have a nice day!

    Best regards,

    Terence Liu(MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | From: "Alan" <>
    | Followup-To: microsoft.public.windows.server.sbs
    | Subject: Excel Macro Security Problem - Trusted macros not running for
    users (but do run for domain admins)
    | Date: Tue, 23 Jan 2007 11:12:49 +1300
    | Lines: 72
    | X-Priority: 3
    | X-MSMail-Priority: Normal
    | X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
    | X-RFC2646: Format=Flowed; Original
    | Message-ID: <#>
    | Newsgroups:
    microsoft.public.excel.programming,microsoft.public.windows.server.sbs
    | NNTP-Posting-Host: smtp.kingduff.co.nz 210.54.249.249
    | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
    | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:12020
    microsoft.public.excel.programming:14917
    | X-Tomcat-NG: microsoft.public.windows.server.sbs
    |
    |
    | Hi All,
    |
    | We have a slightly odd situation that I cannot understand.
    |
    | *Background*
    |
    | We are running Excel 2000 and have been for many years. We have a
    | number of excel files with macros signed with a local certificate, and
    | macro security is set to high.
    |
    | These files opened and ran the macros fine.
    |
    |
    | *Recently*
    |
    | We have just upgraded Outlook 2000 to Outlook 2003.
    |
    | It appears that in doing that update, macros in Excel will no longer
    | work - they are all disabled even for 'medium security' settings (low
    | security allows the macros to run).
    |
    | If we make the user a domain admin then everything works fine.
    |
    | If we then subsequently take the user back to a standard user,
    | everything works fine still.
    |
    |
    | *Issue*
    |
    | We don't really want to have to go around each individual user,
    | elevate their rights, run OL and Excel, and then reduce their rights
    | again - that would take ages and would be a major pain for the users
    | too.
    |
    | I am hoping that someone might know if there is some registry key (or
    | other location) that the users need to have write permissions to make
    | this work? If so, we can more easily deploy a permission change on
    | that key using GP or a login script or similar.
    |
    |
    | Thanks in advance for any help you can provide,
    | --
    | Alan.
    |
    | The views expressed are my own, and not those of my employer or anyone
    | else associated with me.
    |
    | My current valid email address is:
    |
    |
    |
    | This is valid as is. It is not munged, or altered at all.
    |
    | It will be valid for AT LEAST one month from the date of this post.
    |
    | If you are trying to contact me after that time,
    | it MAY still be valid, but may also have been
    | deactivated due to spam. If so, and you want
    | to contact me by email, try searching for a
    | more recent post by me to find my current
    | email address.
    |
    | The following is a (probably!) totally unique
    | and meaningless string of characters that you
    | can use to find posts by me in a search engine:
    |
    | ewygchvboocno43vb674b6nq46tvb
    |
    |
    |
    |
    |
     
    Terence Liu [MSFT], Jan 23, 2007
    #2
    1. Advertisements

  3. Alan

    Alan Guest

    Hi Terence,

    Are you saying that you don't really think this is a permissions
    issue, but is actually an excel issue?

    I did cross post this to the excel newsgroup, but no-one there has
    responded, nor would I really have expected them to, since it is not
    an excel problem (just manifesting itself there).

    Thanks,
    --
    Alan.

    The views expressed are my own, and not those of my employer or anyone
    else associated with me.

    My current valid email address is:



    This is valid as is. It is not munged, or altered at all.

    It will be valid for AT LEAST one month from the date of this post.

    If you are trying to contact me after that time,
    it MAY still be valid, but may also have been
    deactivated due to spam. If so, and you want
    to contact me by email, try searching for a
    more recent post by me to find my current
    email address.

    The following is a (probably!) totally unique
    and meaningless string of characters that you
    can use to find posts by me in a search engine:

    ewygchvboocno43vb674b6nq46tvb
     
    Alan, Jan 24, 2007
    #3
  4. Hello Alan,

    Thank you for kind update.

    The issue is caused by Outlook 2003 installation, you can temporary resolve
    it by change the permissions. But this is not the root cause.

    The Office NG will give you more professional investigation.

    If there is no response in Office NG, you can try to post it again.

    Note: Public NG is free, we do not handle every post in public NG, it is
    normal. The same in SBS NG.

    Hope info above will give you some help.

    Thanks and have a nice day!

    Best regards,

    Terence Liu(MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | From: "Alan" <>
    | References: <#>
    <>
    | Subject: Re: Excel Macro Security Problem - Trusted macros not running
    for users (but do run for domain admins)
    | Date: Wed, 24 Jan 2007 13:44:15 +1300
    | Lines: 230
    | X-Priority: 3
    | X-MSMail-Priority: Normal
    | X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
    | X-RFC2646: Format=Flowed; Original
    | Message-ID: <#>
    | Newsgroups: microsoft.public.windows.server.sbs
    | NNTP-Posting-Host: smtp.kingduff.co.nz 210.54.249.249
    | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
    | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:12315
    | X-Tomcat-NG: microsoft.public.windows.server.sbs
    |
    |
    | | > Hello Alan,
    | >
    | > Thank you for posting here.
    | >
    | > From the post, I understand you have problem about Excel macro
    | > security
    | > problem. After Outlook 2000 to Outlook 2003, you can not run Excel
    | > macro.
    | >
    | > If this is your concern, please repost your issue in Excel newsgroup
    | > for
    | > further assistance.
    | >
    | > This newsgroup is primarily for issues involving deployment,
    | > configuration,
    | > consultation and troubleshooting. The reason why we recommend
    | > posting
    | > appropriately is you will get the most qualified pool of
    | > respondents, and
    | > other partners who read the newsgroups regularly can either share
    | > their
    | > knowledge or learn from your interaction with us.
    | >
    | > Excel Newsgroup: microsoft.public.excel
    | >
    | > I hope the information above is helpful.
    | >
    | > If there is anything else I can do for you, feel free to let me
    | > know.
    | >
    | > Thanks and have a nice day!
    | >
    | > Best regards,
    | >
    | > Terence Liu(MSFT)
    | >
    | > Microsoft CSS Online Newsgroup Support
    | >
    | > Get Secure! - www.microsoft.com/security
    | >
    | > =====================================================
    | > This newsgroup only focuses on SBS technical issues. If you have
    | > issues
    | > regarding other Microsoft products, you'd better post in the
    | > corresponding
    | > newsgroups so that they can be resolved in an efficient and timely
    | > manner.
    | > You can locate the newsgroup here:
    | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
    | >
    | > When opening a new thread via the web interface, we recommend you
    | > check the
    | > "Notify me of replies" box to receive e-mail notifications when
    | > there are
    | > any updates in your thread. When responding to posts via your
    | > newsreader,
    | > please "Reply to Group" so that others may learn and benefit from
    | > your
    | > issue.
    | >
    | > Microsoft engineers can only focus on one issue per thread. Although
    | > we
    | > provide other information for your reference, we recommend you post
    | > different incidents in different threads to keep the thread clean.
    | > In doing
    | > so, it will ensure your issues are resolved in a timely manner.
    | >
    | > For urgent issues, you may want to contact Microsoft CSS directly.
    | > Please
    | > check http://support.microsoft.com for regional support phone
    | > numbers.
    | >
    | > Any input or comments in this thread are highly appreciated.
    | > =====================================================
    | >
    | > This posting is provided "AS IS" with no warranties, and confers no
    | > rights.
    | >
    | > --------------------
    | > | From: "Alan" <>
    | > | Followup-To: microsoft.public.windows.server.sbs
    | > | Subject: Excel Macro Security Problem - Trusted macros not running
    | > for
    | > users (but do run for domain admins)
    | > | Date: Tue, 23 Jan 2007 11:12:49 +1300
    | > | Lines: 72
    | > | X-Priority: 3
    | > | X-MSMail-Priority: Normal
    | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
    | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
    | > | X-RFC2646: Format=Flowed; Original
    | > | Message-ID: <#>
    | > | Newsgroups:
    | > microsoft.public.excel.programming,microsoft.public.windows.server.sbs
    | > | NNTP-Posting-Host: smtp.kingduff.co.nz 210.54.249.249
    | > | Path:
    | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
    | > | Xref: TK2MSFTNGHUB02.phx.gbl
    | > microsoft.public.windows.server.sbs:12020
    | > microsoft.public.excel.programming:14917
    | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
    | > |
    | > |
    | > | Hi All,
    | > |
    | > | We have a slightly odd situation that I cannot understand.
    | > |
    | > | *Background*
    | > |
    | > | We are running Excel 2000 and have been for many years. We have a
    | > | number of excel files with macros signed with a local certificate,
    | > and
    | > | macro security is set to high.
    | > |
    | > | These files opened and ran the macros fine.
    | > |
    | > |
    | > | *Recently*
    | > |
    | > | We have just upgraded Outlook 2000 to Outlook 2003.
    | > |
    | > | It appears that in doing that update, macros in Excel will no
    | > longer
    | > | work - they are all disabled even for 'medium security' settings
    | > (low
    | > | security allows the macros to run).
    | > |
    | > | If we make the user a domain admin then everything works fine.
    | > |
    | > | If we then subsequently take the user back to a standard user,
    | > | everything works fine still.
    | > |
    | > |
    | > | *Issue*
    | > |
    | > | We don't really want to have to go around each individual user,
    | > | elevate their rights, run OL and Excel, and then reduce their
    | > rights
    | > | again - that would take ages and would be a major pain for the
    | > users
    | > | too.
    | > |
    | > | I am hoping that someone might know if there is some registry key
    | > (or
    | > | other location) that the users need to have write permissions to
    | > make
    | > | this work? If so, we can more easily deploy a permission change
    | > on
    | > | that key using GP or a login script or similar.
    | > |
    | > |
    | > | Thanks in advance for any help you can provide,
    | > | --
    | > | Alan.
    | > |
    | > | The views expressed are my own, and not those of my employer or
    | > anyone
    | > | else associated with me.
    | > |
    | > | My current valid email address is:
    | > |
    | > |
    | > |
    | > | This is valid as is. It is not munged, or altered at all.
    | > |
    | > | It will be valid for AT LEAST one month from the date of this
    | > post.
    | > |
    | > | If you are trying to contact me after that time,
    | > | it MAY still be valid, but may also have been
    | > | deactivated due to spam. If so, and you want
    | > | to contact me by email, try searching for a
    | > | more recent post by me to find my current
    | > | email address.
    | > |
    | > | The following is a (probably!) totally unique
    | > | and meaningless string of characters that you
    | > | can use to find posts by me in a search engine:
    | > |
    | > | ewygchvboocno43vb674b6nq46tvb
    | > |
    | > |
    | > |
    | > |
    | > |
    | >
    |
    | Hi Terence,
    |
    | Are you saying that you don't really think this is a permissions
    | issue, but is actually an excel issue?
    |
    | I did cross post this to the excel newsgroup, but no-one there has
    | responded, nor would I really have expected them to, since it is not
    | an excel problem (just manifesting itself there).
    |
    | Thanks,
    | --
    | Alan.
    |
    | The views expressed are my own, and not those of my employer or anyone
    | else associated with me.
    |
    | My current valid email address is:
    |
    |
    |
    | This is valid as is. It is not munged, or altered at all.
    |
    | It will be valid for AT LEAST one month from the date of this post.
    |
    | If you are trying to contact me after that time,
    | it MAY still be valid, but may also have been
    | deactivated due to spam. If so, and you want
    | to contact me by email, try searching for a
    | more recent post by me to find my current
    | email address.
    |
    | The following is a (probably!) totally unique
    | and meaningless string of characters that you
    | can use to find posts by me in a search engine:
    |
    | ewygchvboocno43vb674b6nq46tvb
    |
    |
    |
    |
    |
     
    Terence Liu [MSFT], Jan 24, 2007
    #4
  5. Alan

    Alan Guest

    Okay - thanks for your help Terence.

    --
    Alan.

    The views expressed are my own, and not those of my employer or anyone
    else associated with me.

    My current valid email address is:



    This is valid as is. It is not munged, or altered at all.

    It will be valid for AT LEAST one month from the date of this post.

    If you are trying to contact me after that time,
    it MAY still be valid, but may also have been
    deactivated due to spam. If so, and you want
    to contact me by email, try searching for a
    more recent post by me to find my current
    email address.

    The following is a (probably!) totally unique
    and meaningless string of characters that you
    can use to find posts by me in a search engine:

    ewygchvboocno43vb674b6nq46tvb
     
    Alan, Jan 24, 2007
    #5
  6. Hello Alan,

    Thank you for kind update.

    Thans very much for your understanding.

    Please do not hesitate to post in this great newsgroup if you need any
    assistance in the future. I look forward to working with you again.

    Thank you and have a nice day,

    Best regards,

    Terence Liu(MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | From: "Alan" <>
    | References: <#>
    <>
    <#>
    <H1k8#>
    | Subject: Re: Excel Macro Security Problem - Trusted macros not running
    for users (but do run for domain admins)
    | Date: Thu, 25 Jan 2007 10:06:59 +1300
    | Lines: 382
    | X-Priority: 3
    | X-MSMail-Priority: Normal
    | X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
    | X-RFC2646: Format=Flowed; Original
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
    | Message-ID: <#4Clgv$>
    | Newsgroups: microsoft.public.windows.server.sbs
    | NNTP-Posting-Host: smtp.kdb.co.nz 210.54.249.249
    | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
    | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:12543
    | X-Tomcat-NG: microsoft.public.windows.server.sbs
    |
    |
    |
    | | > Hello Alan,
    | >
    | > Thank you for kind update.
    | >
    | > The issue is caused by Outlook 2003 installation, you can temporary
    | > resolve
    | > it by change the permissions. But this is not the root cause.
    | >
    | > The Office NG will give you more professional investigation.
    | >
    | > If there is no response in Office NG, you can try to post it again.
    | >
    | > Note: Public NG is free, we do not handle every post in public NG,
    | > it is
    | > normal. The same in SBS NG.
    | >
    | > Hope info above will give you some help.
    | >
    | > Thanks and have a nice day!
    | >
    | > Best regards,
    | >
    | > Terence Liu(MSFT)
    | >
    | > Microsoft CSS Online Newsgroup Support
    | >
    | > Get Secure! - www.microsoft.com/security
    | >
    | > =====================================================
    | > This newsgroup only focuses on SBS technical issues. If you have
    | > issues
    | > regarding other Microsoft products, you'd better post in the
    | > corresponding
    | > newsgroups so that they can be resolved in an efficient and timely
    | > manner.
    | > You can locate the newsgroup here:
    | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
    | >
    | > When opening a new thread via the web interface, we recommend you
    | > check the
    | > "Notify me of replies" box to receive e-mail notifications when
    | > there are
    | > any updates in your thread. When responding to posts via your
    | > newsreader,
    | > please "Reply to Group" so that others may learn and benefit from
    | > your
    | > issue.
    | >
    | > Microsoft engineers can only focus on one issue per thread. Although
    | > we
    | > provide other information for your reference, we recommend you post
    | > different incidents in different threads to keep the thread clean.
    | > In doing
    | > so, it will ensure your issues are resolved in a timely manner.
    | >
    | > For urgent issues, you may want to contact Microsoft CSS directly.
    | > Please
    | > check http://support.microsoft.com for regional support phone
    | > numbers.
    | >
    | > Any input or comments in this thread are highly appreciated.
    | > =====================================================
    | >
    | > This posting is provided "AS IS" with no warranties, and confers no
    | > rights.
    | >
    | > --------------------
    | > | From: "Alan" <>
    | > | References: <#>
    | > <>
    | > | Subject: Re: Excel Macro Security Problem - Trusted macros not
    | > running
    | > for users (but do run for domain admins)
    | > | Date: Wed, 24 Jan 2007 13:44:15 +1300
    | > | Lines: 230
    | > | X-Priority: 3
    | > | X-MSMail-Priority: Normal
    | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
    | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
    | > | X-RFC2646: Format=Flowed; Original
    | > | Message-ID: <#>
    | > | Newsgroups: microsoft.public.windows.server.sbs
    | > | NNTP-Posting-Host: smtp.kingduff.co.nz 210.54.249.249
    | > | Path:
    | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
    | > | Xref: TK2MSFTNGHUB02.phx.gbl
    | > microsoft.public.windows.server.sbs:12315
    | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
    | > |
    | > |
    | > message
    | > | | > | > Hello Alan,
    | > | >
    | > | > Thank you for posting here.
    | > | >
    | > | > From the post, I understand you have problem about Excel macro
    | > | > security
    | > | > problem. After Outlook 2000 to Outlook 2003, you can not run
    | > Excel
    | > | > macro.
    | > | >
    | > | > If this is your concern, please repost your issue in Excel
    | > newsgroup
    | > | > for
    | > | > further assistance.
    | > | >
    | > | > This newsgroup is primarily for issues involving deployment,
    | > | > configuration,
    | > | > consultation and troubleshooting. The reason why we recommend
    | > | > posting
    | > | > appropriately is you will get the most qualified pool of
    | > | > respondents, and
    | > | > other partners who read the newsgroups regularly can either
    | > share
    | > | > their
    | > | > knowledge or learn from your interaction with us.
    | > | >
    | > | > Excel Newsgroup: microsoft.public.excel
    | > | >
    | > | > I hope the information above is helpful.
    | > | >
    | > | > If there is anything else I can do for you, feel free to let me
    | > | > know.
    | > | >
    | > | > Thanks and have a nice day!
    | > | >
    | > | > Best regards,
    | > | >
    | > | > Terence Liu(MSFT)
    | > | >
    | > | > Microsoft CSS Online Newsgroup Support
    | > | >
    | > | > Get Secure! - www.microsoft.com/security
    | > | >
    | > | > =====================================================
    | > | > This newsgroup only focuses on SBS technical issues. If you have
    | > | > issues
    | > | > regarding other Microsoft products, you'd better post in the
    | > | > corresponding
    | > | > newsgroups so that they can be resolved in an efficient and
    | > timely
    | > | > manner.
    | > | > You can locate the newsgroup here:
    | > | >
    | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
    | > | >
    | > | > When opening a new thread via the web interface, we recommend
    | > you
    | > | > check the
    | > | > "Notify me of replies" box to receive e-mail notifications when
    | > | > there are
    | > | > any updates in your thread. When responding to posts via your
    | > | > newsreader,
    | > | > please "Reply to Group" so that others may learn and benefit
    | > from
    | > | > your
    | > | > issue.
    | > | >
    | > | > Microsoft engineers can only focus on one issue per thread.
    | > Although
    | > | > we
    | > | > provide other information for your reference, we recommend you
    | > post
    | > | > different incidents in different threads to keep the thread
    | > clean.
    | > | > In doing
    | > | > so, it will ensure your issues are resolved in a timely manner.
    | > | >
    | > | > For urgent issues, you may want to contact Microsoft CSS
    | > directly.
    | > | > Please
    | > | > check http://support.microsoft.com for regional support phone
    | > | > numbers.
    | > | >
    | > | > Any input or comments in this thread are highly appreciated.
    | > | > =====================================================
    | > | >
    | > | > This posting is provided "AS IS" with no warranties, and confers
    | > no
    | > | > rights.
    | > | >
    | > | > --------------------
    | > | > | From: "Alan" <>
    | > | > | Followup-To: microsoft.public.windows.server.sbs
    | > | > | Subject: Excel Macro Security Problem - Trusted macros not
    | > running
    | > | > for
    | > | > users (but do run for domain admins)
    | > | > | Date: Tue, 23 Jan 2007 11:12:49 +1300
    | > | > | Lines: 72
    | > | > | X-Priority: 3
    | > | > | X-MSMail-Priority: Normal
    | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
    | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
    | > | > | X-RFC2646: Format=Flowed; Original
    | > | > | Message-ID: <#>
    | > | > | Newsgroups:
    | > | >
    | > microsoft.public.excel.programming,microsoft.public.windows.server.sbs
    | > | > | NNTP-Posting-Host: smtp.kingduff.co.nz 210.54.249.249
    | > | > | Path:
    | > | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
    | > | > | Xref: TK2MSFTNGHUB02.phx.gbl
    | > | > microsoft.public.windows.server.sbs:12020
    | > | > microsoft.public.excel.programming:14917
    | > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
    | > | > |
    | > | > |
    | > | > | Hi All,
    | > | > |
    | > | > | We have a slightly odd situation that I cannot understand.
    | > | > |
    | > | > | *Background*
    | > | > |
    | > | > | We are running Excel 2000 and have been for many years. We
    | > have a
    | > | > | number of excel files with macros signed with a local
    | > certificate,
    | > | > and
    | > | > | macro security is set to high.
    | > | > |
    | > | > | These files opened and ran the macros fine.
    | > | > |
    | > | > |
    | > | > | *Recently*
    | > | > |
    | > | > | We have just upgraded Outlook 2000 to Outlook 2003.
    | > | > |
    | > | > | It appears that in doing that update, macros in Excel will no
    | > | > longer
    | > | > | work - they are all disabled even for 'medium security'
    | > settings
    | > | > (low
    | > | > | security allows the macros to run).
    | > | > |
    | > | > | If we make the user a domain admin then everything works fine.
    | > | > |
    | > | > | If we then subsequently take the user back to a standard user,
    | > | > | everything works fine still.
    | > | > |
    | > | > |
    | > | > | *Issue*
    | > | > |
    | > | > | We don't really want to have to go around each individual
    | > user,
    | > | > | elevate their rights, run OL and Excel, and then reduce their
    | > | > rights
    | > | > | again - that would take ages and would be a major pain for the
    | > | > users
    | > | > | too.
    | > | > |
    | > | > | I am hoping that someone might know if there is some registry
    | > key
    | > | > (or
    | > | > | other location) that the users need to have write permissions
    | > to
    | > | > make
    | > | > | this work? If so, we can more easily deploy a permission
    | > change
    | > | > on
    | > | > | that key using GP or a login script or similar.
    | > | > |
    | > | > |
    | > | > | Thanks in advance for any help you can provide,
    | > | > | --
    | > | > | Alan.
    | > | > |
    | > | > | The views expressed are my own, and not those of my employer
    | > or
    | > | > anyone
    | > | > | else associated with me.
    | > | > |
    | > | > | My current valid email address is:
    | > | > |
    | > | > |
    | > | > |
    | > | > | This is valid as is. It is not munged, or altered at all.
    | > | > |
    | > | > | It will be valid for AT LEAST one month from the date of this
    | > | > post.
    | > | > |
    | > | > | If you are trying to contact me after that time,
    | > | > | it MAY still be valid, but may also have been
    | > | > | deactivated due to spam. If so, and you want
    | > | > | to contact me by email, try searching for a
    | > | > | more recent post by me to find my current
    | > | > | email address.
    | > | > |
    | > | > | The following is a (probably!) totally unique
    | > | > | and meaningless string of characters that you
    | > | > | can use to find posts by me in a search engine:
    | > | > |
    | > | > | ewygchvboocno43vb674b6nq46tvb
    | > | > |
    | > | > |
    | > | > |
    | > | > |
    | > | > |
    | > | >
    | > |
    | > | Hi Terence,
    | > |
    | > | Are you saying that you don't really think this is a permissions
    | > | issue, but is actually an excel issue?
    | > |
    | > | I did cross post this to the excel newsgroup, but no-one there has
    | > | responded, nor would I really have expected them to, since it is
    | > not
    | > | an excel problem (just manifesting itself there).
    | > |
    | > | Thanks,
    | > | --
    | > | Alan.
    | > |
    | > | The views expressed are my own, and not those of my employer or
    | > anyone
    | > | else associated with me.
    | > |
    | > | My current valid email address is:
    | > |
    | > |
    | > |
    | > | This is valid as is. It is not munged, or altered at all.
    | > |
    | > | It will be valid for AT LEAST one month from the date of this
    | > post.
    | > |
    | > | If you are trying to contact me after that time,
    | > | it MAY still be valid, but may also have been
    | > | deactivated due to spam. If so, and you want
    | > | to contact me by email, try searching for a
    | > | more recent post by me to find my current
    | > | email address.
    | > |
    | > | The following is a (probably!) totally unique
    | > | and meaningless string of characters that you
    | > | can use to find posts by me in a search engine:
    | > |
    | > | ewygchvboocno43vb674b6nq46tvb
    | > |
    | > |
    | > |
    | > |
    | > |
    | >
    |
    | Okay - thanks for your help Terence.
    |
    | --
    | Alan.
    |
    | The views expressed are my own, and not those of my employer or anyone
    | else associated with me.
    |
    | My current valid email address is:
    |
    |
    |
    | This is valid as is. It is not munged, or altered at all.
    |
    | It will be valid for AT LEAST one month from the date of this post.
    |
    | If you are trying to contact me after that time,
    | it MAY still be valid, but may also have been
    | deactivated due to spam. If so, and you want
    | to contact me by email, try searching for a
    | more recent post by me to find my current
    | email address.
    |
    | The following is a (probably!) totally unique
    | and meaningless string of characters that you
    | can use to find posts by me in a search engine:
    |
    | ewygchvboocno43vb674b6nq46tvb
    |
    |
    |
     
    Terence Liu [MSFT], Jan 25, 2007
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.