Use the Custom Maintenance Wizard (Maintwiz.exe) to update an existing Microsoft® Office XP configuration. The wizard reads the package (MSI file) and records the modifications in a configuration maintenance file (CMW file). When you run Maintwiz.exe on a user’s computer with the /c command-line option, the changes in the specified CMW file are applied.

When you use the Custom Maintenance Wizard to create a CMW file, note the following:

• After you specify the MSI file and CMW file to use, you can navigate to any page of the wizard to modify settings. The wizard does not save your changes in the CMW file until you click Finish.
  
• Do not use the Office XP version of the Custom Maintenance Wizard with MSI files or CMW files created for Office 2000. The wizard allows you to cancel the warning message and proceed, but the resulting CMW file does not produce the desired results.

Open the MSI File
Open the CMW File
Select the CMW File to Save
Specify New Organization
Set Feature Installation States
Change Office User Settings
Add/Remove Files
Add/Remove Registry Entries
Identify Additional Servers
Specify Office Security Settings
Outlook: Customize Default Profile
Outlook: Specify Exchange Settings
Outlook: Add Accounts
Outlook: Remove Accounts and Export Settings
Outlook: Customize Default Settings
Save Changes
Command-line options for the Custom Maintenance Wizard
Custom Maintenance Wizard versus Custom Installation Wizard

For information about downloading and installing the Custom Maintenance Wizard, see Custom Maintenance Wizard in the Office Resource Kit Toolbox.

Open the MSI File

Choose the MSI file (package) that you used to install Office XP.

Name and path of MSI file to open

Enter the name and path of the package on the administrative installation point. By default, the MSI file is located in the root folder of the Office CD or the root of the administrative installation point, in the same location as Setup.exe.

---

 Tip    The CMW file you create works only with the MSI file specified here. If you ignore the warning message and use the CMW file with another Office package or a previous version of Office, the CMW file does not produce the desired results.

---

Example:

\\server\share\Office XP\Proplus.msi

Open the CMW File

Create or use an existing CMW file.

Create a new CMW file

Click Next to specify the path and file name.

Open an existing CMW file

Enter the name and path of a CMW file that you want to modify. You can create a new configuration maintenance file based on an existing CMW file by opening the CMW file and then saving it with a different name.

---

 Tip    If you use an existing CMW file, it must be compatible with the Office XP MSI file specified on the previous page of the wizard. For example, if you created a CMW file for Proplus.msi, then you must open it with Proplus.msi. To verify which package a CMW file is based on, right-click the CMW file name in Windows Explorer and click Properites; the product name and version number appear on the Summary tab. Alternatively, open the CMW file in the CMW File Viewer; the text file lists the name of the MSI file.

---

Example:

\\server\share\OfficeXP\MyCMWFile.cmw

Select the CMW File to Save

Enter a name and path for the CMW file.

Name and path of CMW file

If you opened an existing CMW file, you can save it with a different name and specify new settings for a different update scenario.

---

 Tip    Save the CMW file in a subfolder of the administrative installation point, in the same folder as Maintwiz.exe.

---

Specify New Organization

Enter a new default organization name for all users who apply this CMW file.

Organization name

This name appears in the About box (Help menu) and on the banner pages of Office applications. If you specified an organization name when you created the administrative installation point, this option is set to <Default> in the wizard.

---

 Note    Under Microsoft Windows® XP and Windows 2000 Service Pack 2, you cannot use the Custom Maintenance Wizard to update an organization name.

---

Set Feature Installation States

Change the way Office applications and features are installed on users' computers. To set a new default installation state for a feature in the feature tree, click the icon next to the feature name and then select one of the available settings.

---

 Tip    To fully expand the feature tree, run the Custom Maintenance Wizard (MaintWiz.exe) with the /x command-line option.

---

• Leave unchanged

  Keep the setting already applied on the user's computer.

• Run from My Computer

  Copy files and write registry entries and shortcuts associated with the feature to the user's computer and run the application or feature locally.

• Run all from My Computer

  Same as Run from My Computer, except that all child features belonging to the feature are also set to this state.

• Run from Network

  Leave the components for the feature on the administrative installation point and run the feature from there.

• Run all from Network

  Same as Run from Network, except that all child features belonging to the feature are also set to this state. Note that some child features do not support Run from Network; these child features are installed on the local computer.

• Installed on First Use

  Leave the components for the feature and all its child features on the administrative installation point until the user first attempts to use the feature, at which time the components are automatically copied to the local hard disk. Note that some child features do not support Installed on First Use; these features are installed on the local computer.

• Not Available

  Files to support the feature are not installed to the user's computer and registry entries to support the feature are not created.

• Not Available, Hidden, Locked

  Do not install the components for the feature and do not display the feature in the feature tree during Setup. Users cannot install the feature by changing the state of the parent feature or by calling Windows Installer directly from the command line.

Use the Reset Branch button to restore default feature installation states for the selected feature and all subordinate features in the feature tree.

---

Parent and child features

The feature tree is a hierarchy. Parent features contain child features, and child features can contain subordinate child features. For example, the Microsoft Word for Windows feature includes the child feature Help. The Help feature includes the child feature Help for WordPerfect Users.

If you update the feature installation state of a child feature to Run from My Computer, Run from Network, or Installed on First Use, the Custom Maintenance Wizard does not install a child feature unless the parent feature is also installed.

For example, if you apply a CMW file that installs Microsoft Excel add-ins, only users who have Excel installed get the add-ins. If a user does not have Excel installed, then the wizard ignores this setting in the CMW file.

---

For more information about applying a CMW file after an Office installation, see Changing Feature Installation States.

Change Office User Settings

Modify specific user-defined options in Office applications, including settings omitted from an OPS file. To configure an option, select the user-interface element in the tree on the left; all configurable settings associated with that element appear on the right. Double-click a setting and then select one of the following options:

• No Changes

  The setting remains as it is.

• Apply Changes

  The setting is modified based on your choices in the dialog box.

  ---

   Note   When you click Apply Changes to view a setting, and then click OK or Previous Setting or Next Setting, the status changes to Configured, even if you do not change the setting. Inadvertently configuring the setting with an empty hyperlink, path, or file name can cause errors in the application. To ignore changes to an unconfigured setting, click Cancel.

  ---

For more information about changing user settings after an initial installation, see Changing Feature Installation States.

Add/Remove Files

Add files to, or remove files from, users' computers when the configuration maintenance file is applied.

Add Files tab

• Click the Add button, select the file you want to add to the installation, and click Add again.
  
• In the Destination path dialog box, enter the install path for the file on users' computers. You can add files in groups, provided each group is installed in the same folder.
  
• To remove a file in the list, select it and click the Remove button.

When adding files to update an Office installation, note the following:

• Files are copied into the configuration maintenance file when you click Finish. Large files increase the size of the CMW file and the amount of time it takes to create the CMW file.
  
• If you revise a file that is currently attached to a CMW file, you must remove the file from the CMW file and then add the revised version.
  
• Files you add to a CMW file are not removed or replaced if the user modifies, removes, repairs, or reinstalls Office.
  
• Files added to the Remove Files tab are removed before files listed on the Add Files tab are installed. This behavior allows you to delete existing files on users' computers and replace them with new versions. If the target file on a user's computer has been renamed or modified since it was originally created, an added file with the same name does not automatically replace it.

Remove Files tab

• Click the Add button and enter the path and file name of the file you want to delete from users' computers. Paths must begin with a predefined folder keyword, a UNC path, or a drive letter. (For a complete list of predefined folder keywords, see Predefined Folder Keywords to Use in Paths.)
  
• To remove any file in the list, select it and click the Remove button.

Modify button

To change the destination path for files being added or removed, select the file or files on the Add Files or Remove Files tab, click Modify, and enter a new path.

Add/Remove Registry Entries

Registry entries customized on this page may override settings customized on previous pages of the wizard. Use this page to customize options that cannot be set directly in the Office user interface and are not configurable through other wizards or tools.

Add Registry Entry tab

• Click Add to define a new registry entry and add it to the CMW file.
  
• Click Modify to change the value of an existing entry.
  
• Click Import to add a set of entries from a registry file (REG file). If an entry in the REG file duplicates an entry in the Add Registry Entry tab, the wizard prompts you to choose whether to use the registry entries in the list or to overwrite them with those in the REG file.

Add/Modify Registry Entry dialog box

• Root

  Select the branch that contains the entries you want to add or modify. Settings are applied once per user (HKEY_CURRENT_USER) or once per computer (HKEY_LOCAL_MACHINE). Under Windows 2000 or later, you cannot add registry entries to the root of HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER.

• Data type

  Select a data type for the registry value. (Note that under Windows 98 and Windows Me the REG_EXPAND_SZ and REG_MULTI_SZ data types are not available.)

• Key

  Enter the name of the subkey to store the entry in. For example, Software\Microsoft\Office\10.0\Common.

• Create empty key

  Select this check box if the registry entry does not contain a Value name or Value data. Some settings are determined by the presence or absence of a registry entry.

• Value name

  Enter a name for the new registry entry. If you include Value data but leave this field blank, the value is assigned the name <Default>. A key can have only one <Default> value name.

• Value data

  Enter the data (value) to store in the new registry entry. The data must match the data type.

Remove Registry Entry tab

• Click Add to specify a registry entry to remove from users' computers when you run Maintwiz.exe.
  
• Click Modify to change the location or value of a registry entry already listed.

  ---

   Note   The Import button is not available on the Remove Registry Entry tab.

  ---

Delete/Modify Registry Entry dialog box

• Root

  Select the branch that contains the entries you want to remove.

• Key

  Enter the full name of the subkey where the entry is stored. For example, Software\Microsoft\Office\10.0\Common.

• Value name

  Enter the name of the registry entry you want to remove. To remove the entire subkey, including all its value entries, leave the Value name field blank.

  ---

   Note    If a user modifies, removes, repairs, or reinstalls Office, registry entries that you add through a CMW file are not added again. Similarly, registry entries you remove through a CMW file are not removed again.

  ---

For more information about customizing user settings through the Windows registry, see Customizing User-defined Settings.

For more information about working with the Windows registry and registry editors, see the Registry Editor Overview on the Microsoft TechNet Web site.

Identify Additional Servers

Specify additional servers to use when the primary installation server is unavailable. Copy the original administrative installation point to these backup locations. Windows Installer connects to the first available server in the list to install features on demand, run features from the network, or repair Office.

• To add a server to the list, click Add and enter the path.

  If all users have access to the server with the same drive letter, you can use a drive letter in the path. You can also use a UNC path. The path can contain environment variables delimited by percent signs (%) if they are defined for all users.

  ---

   Note    The wizard does not verify the server path or attempt to connect to the server when you enter it in the list.

  ---

• To edit the path, select a server from the list and click Modify.
  
• To remove a server from this list, select it and click Remove.
  
• To change the order of the list, and the order in which Windows Installer checks for an available server, select a server and click the up or down Move arrow.

  ---

   Note    Selecting the Clear existing server list check box deletes all the installation sources previously specified on users’ computers and replaces them with the new list. To append additional servers to the existing source list, leave this check box blank.

  ---

For more information about creating and replicating an administrative installation point on a network server, see Creating an Administrative Installation Point.

Specify Office Security Settings

Customize security settings for Office applications.

Trust Settings

Manage the list that identifies acceptable sources for digitally signed macros, add-ins, ActiveX® controls, and other executable code used by Office applications.

• Clear all existing trusted source lists

  Clearing the list of trusted sources on users' computers helps prevent previously trusted macros and other executable code from previously trusted sources from running.

• Help make sure that users cannot add trusted sources through Office

  Locking the list of trusted sources helps prevent users from adding certificates to the trusted sources list.

• Add Microsoft to the list of trusted sources

  Adding Microsoft to the list of trusted sources helps make sure that all add-ins and templates installed with Office XP applications run on users' computers. If you select Do not trust installed add-ins and templates, then add-ins and templates from previous versions of Office will not run unless you add Microsoft to the list of trusted sources.

  ---

   Note    You cannot create a list of trusted sources directly in the CMW file; however, you can use the Profile Wizard to capture a preconfigured list into an OPS file and apply it to users’ computers.

  ---

Default Security Levels

Select an application and click Modify to set security to one of the following levels:

• High

  If a user opens an Office document that contains macros from an untrusted source, Office disables the macros before opening the file.

• Medium

  If a user opens an Office document that contains macros from an untrusted source, users are warned when the document contains executable code, but they can choose to open the file and run the macros anyway.

• Low

  No security check is performed when users open a file, and macros from untrusted sources with or without certificates will run. This level is not recommended.

• Do not configure the security level

  New applications are installed with default settings; by default, all Office applications being installed for the first time have the security level set to High. Security levels for applications already installed on a user's computer are not modified.

  ---

   Note    Security levels that you specify on this page of the wizard are applied even if the application is already installed on users' computers. If you are staging deployment of Office and stand-alone Office applications, note that security levels in the configuration maintenance file overwrite any previously applied security settings on users' computers unless the Do not configure the security level option is selected.

  ---

Select Add-ins and templates and click Modify to set security to one of the following levels:

• Trust all installed add-ins and templates

  Users can run add-ins or templates already installed on their computers, including custom tools and add-ins and templates from previous versions of Office.

• Do not trust installed add-ins and templates

  Users cannot run add-ins or templates already installed on their computers. To retain use of legacy macros or custom templates, you must digitally sign and certify them and add the source to the trusted sources list. To retain add-ins and templates from previous versions of Office, you must add Microsoft to the list of trusted sources.

• Do not configure the security level

  Leave the setting already specified on the user’s computer.

Unsafe ActiveX Initialization

Determine whether ActiveX controls can save persistent data.

• Initialize using control defaults. User will be warned

  The control runs with default settings. The user is warned that data will not be saved within the hosted document the next time the control is initialized. This setting helps provide protection against a virus transmitted through an ActiveX control.

• Prompt user to use persisted data or control defaults

  Users can choose to initialize the control with persistent data and reuse the data the next time the control is activated.

• Do not configure

  Depending on the design of the ActiveX control, it may or may not save data from one instance of the control to the next. If the control is designed to allow for persistent data, then selecting this option allows the control to persist data and does not prompt or warn the user in any way.

  ---

   Note    Security settings specified in a configuration maintenance file become the default settings on users’ computers; however, users can change them later. To lock down security settings, use system policies. For more information, see Using System Policies.

  ---

  ---

  Disabling support for VBA in Office applications

  You can install Office XP without Visual Basic for Applications (VBA), which can be appropriated by malicious viruses. On the Set Feature Installation States page of the wizard, set the feature to Not Available or Not Available, Hidden, Locked. (Visual Basic for Applications appears under Office Shared Features in the feature tree.)

  If you install Office without VBA, then no VBA macros will run on the computer. This setting also disables all features that rely on VBA, including Office Tools on the Web; many wizards, templates, and add-ins; and all macros. Furthermore, you cannot install Access at all without also installing VBA.

  Disabling support for VBA does not protect you from other potential entry points for viruses, including ActiveX controls on a Web page or EXE files attached to e-mail messages. While installing VBA does allow for potential risk attendant with additional functionality, by using controls such as system policies to enforce security settings, you can greatly mitigate this potential risk.

  ---

Outlook: Customize Default Profile

Customize users’ default Outlook profile, which is the set of values in the Windows registry that defines user-specific informaitn. An Outlook profile can contain multiple e-mail accounts. Users can have multiple Outlook profiles, but you can configure only one profile in the transform.

• Use existing profile

  Use the profile already configured on the user’s computer or prompt the user to create a profile the first time Outlook is started. Choosing this option disables the next three pages of the wizard.

• Modify profile

  Modify the default profile on the user’s computer. If no profile exists, Outlook creates a profile based on the options you choose on the next three pages of the wizard; the default profile name is Outlook.

• New profile

  Create a new profile on the user’s computer and make it the default profile; any existing profiles are not removed and remain available to users. You must enter a name in the Profile name box. This name appears in the E-mail Accounts dialog box in Outlook. Outlook creates the profile based on the options you choose on the next three pages of the wizard.

• Apply PRF

  Import an Outlook profile file (PRF file) to define a new default profile. Selecting this option disables the next three pages of the wizard but does not update the wizard with the settings in the PRF file. You can use any profile created for Outlook 2002. Enter a name and path for the profile in the Apply the following profile (PRF file) box. If you created a PRF file for a previous version of Outlook, you can import it to Outlook 2002, provided that the profile defines only MAPI services.

  ---

  Environment variables and Windows 98 or Windows Me

  When you use a PRF file to import a Personal Address Book (PAB) or personal folders file (PST file), Windows stores the imported files on each user’s computer in a location determined by the environment variable %USERPROFILE%. However, under Windows 98 and Windows Me %USERPROFILE% is not defined by default.

  To prevent users from being prompted for the file location when Outlook first starts, you can define %USERPROFILE% programmatically. Alternatively, you can instruct users to accept the default location when prompted. The files are then automatically stored in a location from which Outlook can open and use them.

  ---

If you install Office on a locked-down computer, where the user does not have administrative privileges, then users cannot configure their Outlook profile after Office is installed. For more information about creating and configuring Outlook profiles for users, see Customizing an Outlook Installation.

Outlook: Specify Exchange Settings

Configure users’ Exchange settings in a new or modified Outlook profile.

Do not configure an Exchange Server connection

Prompt the user for profile and account information the first time Outlook starts, unless a profile already exists on the computer.

Configure an Exchange Server connection

Configure settings for a new Exchange Server connection or replace the settings in an existing Exchange Server connection.

• User name

  Identify the user with a specific value or replaceable parameter. If you use the default %USERNAME%, then Outlook uses the user’s log-on name.

  ---

   Note   In Windows 98 and Windows Me, the environment variable %USERNAME% is not defined by default. If you do not define it, then Outlook uses the Windows NT 4.0 domain logon name.

  ---

• Exchange server

  Enter the name of the Exchange server to use. Provide only a literal server name in this text box; for example, Exch-2-Srvr. Do not include backslashes (\\) or similar syntax. When each user starts Outlook for the first time, Outlook replaces this value with the user’s Exchange server.

• Overwrite existing Exchange settings if an Exchange connection exists

  Replace an existing Exchange Server account in the user’s profile with this account.

When you are configuring an Exchange Server connection, click the More settings button to set up user accounts for offline use:

• Path and file name of the Offline Store file (OST file)
  
• Directory path to store Offline Address Book (OAB file)

For more information about customizing users’ Exchange account settings, see Customizing an Outlook Installation.

Outlook: Add Accounts

Include new Outlook e-mail accounts in the user’s profile.

• Do not customize Outlook profile and account information

  Do not add accounts to a new or modified Outlook profile.

• Customize additional Outlook profile and account information

  Specify new account information for a new or modified Outlook profile. The first time the user starts the application, Outlook creates a profile based on the information you specify here.

When you add additional accounts to an Outlook profile, the wizard allows you to specify the following:

• Add

  Click Add to add an account to the list. If you add an account to this list, you must configure it before saving it in the CMW file.

• Modify

  Select an account in the list and click Modify to make changes. The wizard displays options appropriate for the account you select.

• Delete

  Select an account in the list and click Delete to remove it from the CMW file.

• Deliver new mail to the following location

  When you configure an Exchange server or add a Personal Folder File (PST file), select this option to specify a delivery location for new e-mail messages. The default location is the Exchange server, if one is configured; otherwise, the location defaults to the PST file on the user’s computer.

To help make sure that e-mail services to not overlap, Outlook may not allow you to add more than one new account for the same type of service. For example, Outlook verifies that all POP accounts have unique names. The following table shows how Outlook determines whether a new account of the same type as an existing account can be added to the CMW file.

---

 Note    You save only one Outlook profile configuration per CMW file. If you need to create more than one profile, you must create a separate CMW file for each one.

---

Outlook: Remove Accounts and Export Settings

Remove existing e-mail accounts or export settings to a PRF file. These options are available only when you select Modify Profile on the Outlook: Customize Default Profile page of the wizard.

• Remove the following accounts if they exist

  Select Lotus cc:Mail or Microsoft Mail to remove these accounts from users’ computers when Outlook first starts.

• Export Profile Settings

  Click this button to save the profile settings defined in the wizard to a PRF file.

---

 Tip    An efficient way to create an Outlook PRF file is to use the Custom Maintenance Wizard to make your selections and then export them to a PRF file – even if you are not using a CMW file to update Office. You can also edit the PRF file to make additional customizations not exposed in the wizard. For example, you can add an e-mail provider not listed in the wizard.

---

Outlook: Customize Default Settings

Customize default applications settings for Outlook.

Convert Personal Address Book (PAB file) to an Outlook Address Book

If Outlook detects a PAB file on the user’s computer, it converts it to an Outlook Address Book.

Customize Outlook e-mail defaults

Select default settings for user’s e-mail. If you leave this check box empty, Outlook uses default settings.

• Default e-mail editor

  Choose Outlook or Word as the default e-mail editor. (The default is Wordmail.) Choosing Word is equivalent to selecting Use Microsoft Word to edit e-mail messages on the Mail Format tab (Tools |Options menu) in Outlook. Note that this setting does not determine the format of outgoing messages created by the user in Outlook.

• Default e-mail format

  Select the format for outgoing messages created by the user in Outlook. Options are html, rich text, or plain text. (The default is html.)

Save Changes

Click Finish to save changes, or modify your choices by returning to previous pages in the wizard. Your changes are applied when you run Maintwiz.exe on users’ computers.

Command-line options for the Custom Maintenance Wizard

The Custom Maintenance Wizard uses the following command line options.

Custom Maintenance Wizard versus Custom Installation Wizard

After the initial Office deployment, you use the Custom Maintenance Wizard to modify many of the customizations that you set in a transform (MST file). However, not all the settings available in the Custom Installation Wizard are also available in the Custom Maintenance Wizard. The following table summarizes the differences.