Macro Security

[Ric_]

For A-Level IT the little darlings need to use a lot of macros and stuff and it is a little annoying for them having to change the security level every time they load a file.

 

What is the best way to allow macros? - digitally sign/lower security level/?

 

Please help

[Geoff]

Generate a certificate for them to use to sign their code with.

[E1uSiV3]

Well considering they can change the macro level to bypass the high security settings anyway, why not set it to medium so it at least prompts them?

 

The only time i wouldnt do this is if i controlled macro policies and didnt let them change the settings, but seeng as the ycan change the settings it mayaswell be on medium.

[Ric_]

It is currently on Medium setting and they are able to change it - it's just annoying for the teaching staff to have to go through the prompt several times during a demonstration if they have several files to open.

 

@Geoff: Do you recommend that I create a single certificate for all or set up a certificate server allowing them to produce their own certificates? Ideas of how best to implement are more than welcome.

[Geoff]

Setup a single certificate for each group of people (class/year/whatever). Create new certificates every year/term (make sure the old ones expire!). Do not allow anyone other than yourself to create/manage certificates.

 

I have a sneaking suspicion you'll need W2k3 Server Enterprise edition to pull this off though. I don't think Standard edition has the PKI services you need.