Macro Security

For A-Level IT the little darlings need to use a lot of macros and stuff and it is a little annoying for them having to change the security level every time they load a file.

What is the best way to allow macros? - digitally sign/lower security level/?

Please help

Well considering they can change the macro level to bypass the high security settings anyway, why not set it to medium so it at least prompts them?

The only time i wouldnt do this is if i controlled macro policies and didnt let them change the settings, but seeng as the ycan change the settings it mayaswell be on medium.

It is currently on Medium setting and they are able to change it - it's just annoying for the teaching staff to have to go through the prompt several times during a demonstration if they have several files to open.

@Geoff: Do you recommend that I create a single certificate for all or set up a certificate server allowing them to produce their own certificates? Ideas of how best to implement are more than welcome.

Setup a single certificate for each group of people (class/year/whatever). Create new certificates every year/term (make sure the old ones expire!). Do not allow anyone other than yourself to create/manage certificates.

I have a sneaking suspicion you'll need W2k3 Server Enterprise edition to pull this off though. I don't think Standard edition has the PKI services you need.