Office Security-Related Policies

Provided in this section are policies related to security settings of Microsoft Office 2003 applications. This same information can be found by examining the various ADM policy templates that are included with the Office Resource Kit and are installed during a typical installation.

The policies presented here are listed by the respective ADM policy template, policy grouping, and then the security-related policy text name. The registry key is not documented here. However, it is possible to find the registry key in the ADM template and then copy that key information and the possible data value you may need to put into a REG file or to use with the Add/Remove Registry Entries page of the Custom Installation Wizard or Custom Maintenance Wizard. Copying the registry entry is not a recommended step in deploying policies; use of Active Directory® is the recommended method of policy propagation to users on a corporate network.


 Note    If you have multiple versions of Office currently installed throughout a corporate network, the policy settings will not conflict with one another, because of the method in which the registry nodes for Microsoft Office XP (Office 10.0) and Microsoft Office 2003 (Office 11.0) are stored within the registry.


AER_1033.adm — Automatic Error Reporting (replacement for dw20.adm)

 General Reporting

  Disable error reporting

  Do not upload user documents

  Do not upload any additional data

 Corporate Error Reporting

  Hide Don’t Send button

  URL to launch after reporting

  URL to explain why user should report

 Queued Reporting

  Bypass queue and send all reports

  Send all queued reports silently

- - - - -

ACCESS11.adm — Microsoft Office Access 2003

 Tools | Macro — Security

  Security Level

  Trust all installed add-ins and templates

 Tools | Security — Workgroup Administrator

  Path to shared Workgroup information file for secured MDB files

 Disable items in user interface — Custom

  Disable command bar buttons and menu items

  Disable shortcut keys

 Disable items in user interface — Predefined

  Disable command bar buttons and menu items

  Disable shortcut keys

 Miscellaneous

  Do not prompt to convert older databases

- - - - -

EXCEL11.adm — Microsoft Office Excel 2003

 Tools | Macro — Security

  Security Level

   Trust all installed add-ins and templates

   Trust access to Visual Basic Project

  Disable items in user interface — Custom

   Disable command bar buttons and menu items

   Disable shortcut keys

  Disable items in user interface — Predefined

   Disable command bar buttons and menu items

   Disable shortcut keys

 Miscellaneous

  OLAP PivotTable User Defined Function (UDF) security setting

- - - - -

FP11.adm — Microsoft Office FrontPage® 2003

 Disable items in user interface — Custom

  Disable command bar buttons and menu items

 Disable items in user interface — Predefined

  Disable command bar buttons and menu items

- - - - -

GAL11.adm — Microsoft Clip Organizer

 Disable Clips Online access from Clip Organizer

 Clip Organizer Online URL

 Disable menu item: File | Send to Mail Recipient (as Attachment)

 Disable menu item: Tools | Tools on the Web…

 Prevent automatically importing clips

 Prevent users from importing new clips

- - - - -

INF11.adm — Microsoft Office InfoPath™ 2003

 Disable items in user interface — Custom

  Disable command bar buttons and menu items

 Disable items in user interface — Predefined

  Disable command bar buttons and menu items

  Disable shortcut keys

 Security

  Disable opening of solutions from the Internet security zone

  Disable installed solutions full access to machine

- - - - -

INSTLR11.adm — Windows Installer

 Always install with elevated privileges

- - - - -

OFFICE11.adm — Microsoft Office 2003

 Tools | AutoCorrect options…

  Smart Tags

   Check for new actions URL

 Tools | Options | General | Service Options — Online Content

  Online Content Options

 Help — Help | Privacy Settings

  Enable Customer Experience Improvement Program

 Help — Help | Detect and Repair

  Discard my customized settings and restore default settings

 Security Settings

  Disable VBA for Office applications

  Unsafe ActiveX Initialization

  Automation Security

  Prevent users from changing Office encryption settings

  Specify Trusted Alert Sources

  Prevent Word and Excel from loading managed code extensions

 Shared paths

  Web Query dialog home Page

 Save My Settings Wizard

  Default location to store settings file (OPS)

 Customizable Error Messages

  Base URL

 Disable items in user interface

  Disable Information Rights Management User Interface

 Services - Fax

  Disable Fax Over Internet feature

 Instance Messaging Integration

  Allow IM status queries for people not on the Messenger Contact list

 Manage Restricted Permissions

  Additional permissions request URL

  Always require users to connect to verify permissions

  Never allow users to specify groups when restricting permission for document

 Miscellaneous

  Do not upload media files

  Disable hyperlinks to web templates in File | New and task panes

  Prevent access to Web-based file storage

  Disable web view in the Office file dialogs

- - - - -

OUTLK11.adm — Microsoft Office Outlook® 2003

 Tools | Macro — Security

  Security Level

  Outlook: Trust all installed add-ins and templates

 Disable items in user interface — Custom

  Disable command bar buttons and menu items

  Disable shortcut keys

 Disable items in user interface — Predefined

  Disable command bar buttons and menu items

  Disable shortcut keys

 Outlook Today settings

  URL for custom Outlook Today

 Miscellaneous

  Online Meetings

  Auto-repair of MAPI32.DLL

  Prevent users from adding e-mail account types

  Prevent users from making changes to Outlook profiles

- - - - -

PPT11.adm — Microsoft Office PowerPoint® 2003

 Tools | Options — Edit

  Password protection

 Tools | Macro — Security

  Security Level

  Trust all installed add-ins and templates

  Trust access to Visual Basic Project

 Slide Show | Online Broadcast | Setup and Schedule — Broadcast settings

  Send audio

  Send video

  Other Broadcast Settings

   Chat server URL

   Event URL

   Help page URL

   Video/audio test page URL

 Disable items in user interface — Custom

  Disable command bar buttons and menu items

  Disable shortcut keys

 Disable items in user interface — Predefined

  Disable command bar buttons and menu items

  Disable shortcut keys

- - - - -

PUB11.adm — Microsoft Office Publisher 2003

 Tools | Macro — Security

  Security Level

  Trust all installed add-ins and templates

 Miscellaneous

  Prevent web pages displayed in Publisher from accessing the Office object model

- - - - -

WORD11.adm — Microsoft Office Word 2003

 Tools | Options - General

  Allow background open of web pages

  Confirm conversion at Open

  Security

   Warn before printing, saving, or sending a file that contains tracked changes or comments

   Make hidden markup visible

 Tools | Macro — Security

  Security Level

  Trust all installed add-ins and templates

  Trust access to Visual Basic Project

 Disable items in user interface — Custom

  Disable command bar buttons and menu items

  Disable shortcut keys

 Disable items in user interface — Predefined

  Disable command bar buttons and menu items

  Disable shortcut keys

 
 
Applies to:
Deployment Center 2003