Office 2016 Macros

[MrFrostmaul]

Hi all,

 

We block macros from GPO for all users including internet ones with 2016 for Excel etc, but are running into a issue when a staff member who does pupil tracking tries to open a spreadsheet download from CEM for baseline predictions which requires macros to be enabled for the spreadsheet to do its magic, but can't re-enable macros for users for security (all users are under one Office 2016 GPO policy).

 

Has anyone else ran into this issue before and/or knows a way to solve this - ideally allowing just for this one user?

 

Thanks

Edited September 15, 2016 by MrFrostmaul

[Arthur]

ideally allowing just for this one user?

Create another GPO that enables macros just for that one user and then give it a higher precedence so that it overrides the other GPO which disables macros.

 

Perhaps a better option in the long run would be if CEM digitally signed their macros?

[KevinH]

Create a security group, add that user to it, and place a deny on the GPO for that group.

 

How to exclude individual users or computers from a Group Policy Object

[TechMonkey]

Perhaps a better option in the long run would be if CEM digitally signed their macros?

 

Ha ha ha ha ha, you are a card. Educational software following proper procedures and security guidelines? Whatever next? They might stop asking us to give admin permissions to all next!

 

More helpfully, would setting a trusted folder work? You could set either a network location of that person or a particular folder in their documents to be trusted and then I am pretty sure it will allow macros. If it works then it would be better than leaving macros wide open for that user.

Edited September 15, 2016 by TechMonkey

[Arthur]

Educational software following proper procedures and security guidelines?

Not likely, is it?

 

More helpfully, would setting a trusted folder work? You could set either a network location of that person or a particular folder in their documents to be trusted and then I am pretty sure it will allow macros. If it works then it would be better than leaving macros wide open for that user.

Yeah. That's probably a better option.

[MrFrostmaul]

Thanks all, yeah I wish companies would aid us with proper security guidelines.

Have setup a trusted folder for that user instead of a new GPO just for one user and is working now.

 

Thanks