Office Security-related Policies

Provided in this section are policies related to security settings of Microsoft Office 2003 Editions applications. This same information can be found by examining the various ADM policy templates that are included with the Office Resource Kit and are installed during a typical installation.

The policies presented here are listed by the respective ADM policy template, policy grouping, and then the security-related policy text name. The registry key is not documented here. However, it is possible to find the registry key in the ADM template and then copy that key information and the possible data value you may need to put into a REG file or to use with the Add/Remove Registry Entries page of the Custom Installation Wizard or Custom Maintenance Wizard. Copying the registry entry is not a recommended step in deploying policies; use of Active Directory is the recommended method of policy propagation to users on a corporate network.

Note

If you have multiple versions of Office currently installed throughout a corporate network, the policy settings will not conflict with one another because of the method in which the registry nodes for Microsoft Office XP (Office 10.0) and Microsoft Office 2003 (Office 11.0) are stored within the registry.

• AER_1033.adm—Automatic Error Reporting (replacement for dw20.adm)

  General Reporting

Disable error reporting

Do not upload user documents

Do not upload any additional data

Corporate Error Reporting

Hide Don’t Send button

URL to launch after reporting

URL to explain why user should report

Queued Reporting

Bypass queue and send all reports

Send all queued reports silently

• ACCESS11.adm—Microsoft Office Access 2003

  Tools | Macro—Security

Security Level

Trust all installed add-ins and templates

Trust access to Visual Basic Project

Tools | Security—Workgroup Administrator

Path to shared Workgroup information file for secured MDB files

Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable shortcut keys

Disable items in user interface—Predefined

Disable command bar buttons and menu items

Disable shortcut keys

Miscellaneous

Do not prompt to convert older databases

• EXCEL11.adm—Microsoft Office Excel 2003

  Tools | Macro—Security

Security Level

Trust all installed add-ins and templates

Trust access to Visual Basic Project

Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable shortcut keys

Disable items in user interface—Predefined

Disable command bar buttons and menu items

Disable shortcut keys

Miscellaneous

OLAP PivotTable User Defined Function (UDF) security setting

• FP11.adm—Microsoft Office FrontPage 2003

  Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable items in user interface—Predefined

Disable command bar buttons and menu items

• GAL11.adm—Microsoft Clip Organizer

  Disable Clips Online access from Clip Organizer

  Clip Organizer Online URL

  Disable menu item: File | Send to Mail Recipient (as Attachment)

  Disable menu item: Tools | Tools on the Web…

  Prevent automatically importing clips

  Prevent users from importing new clips

• INF11.adm—Microsoft Office InfoPath 2003

  Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable items in user interface—Predefined

Disable command bar buttons and menu items

Disable shortcut keys

Security

Disable opening of solutions from the Internet security zone

Disable installed solutions full access to machine

• INSTLR11.adm—Windows Installer

  Always install with elevated privileges

• OFFICE11.adm—Microsoft Office 2003

  Tools | AutoCorrect options…

Check for new actions URL

Tools | Options | General | Service Options—Online Content

Online Content Options

Help—Help | Privacy Settings

Enable Customer Experience Improvement Program

Help—Help | Detect and Repair

Discard my customized settings and restore default settings

Security Settings

Disable VBA for Office applications

Unsafe ActiveX Initialization

Automation Security

Prevent users from changing Office encryption settings

Specify Trusted Alert Sources

Prevent Word and Excel from loading managed code extensions

Shared paths

Web Query dialog home Page

Save My Settings Wizard

Prevent users from uploading settings to the internet

Default location to store settings file (OPS)

Help on the Web

Feedback URL

Customizable Error Messages

Base URL

Disable items in user interface

Disable Information Rights Management User Interface

Services

Disable Fax Over Internet feature

Instance Messaging Integration

Allow IM to query people not on the buddy list

Manage Restricted Permissions

Additional permissions request URL

Make document with restricted documents viewable in trusted browsers

Always require users to connect to verify permissions

Never allow users to specify groups when restricting permission for document

Miscellaneous

Do not upload media files

Disable hyperlinks to web templates in File | New and task panes

Prevent access to Web-based file storage

Disable web view in the Office file dialogs

• OUTLK11.adm—Microsoft Office Outlook 2003

  Tools | Macro—Security

Security Level

Outlook: Trust all installed add-ins and templates

Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable shortcut keys

Disable items in user interface—Predefined

Disable command bar buttons and menu items

Disable shortcut keys

Outlook Today settings

URL for custom Outlook Today

Miscellaneous

NetMeeting

Junk e-mail filtering

Auto-repair of MAPI32.DLL

Prevent users from adding e-mail account types

Prevent users from making changes to Outlook profiles

• PPT11.adm—Microsoft Office PowerPoint 2003

  Tools | Options—Edit

Password protection

Tools | Macro—Security

Security Level

Trust all installed add-ins and templates

Trust access to Visual Basic Project

Slide Show | Online Broadcast | Setup and Schedule—Broadcast settings

Send audio

Send video

Slide Show | Online Broadcast | Setup and Schedule—Broadcast settings—Other Broadcast Settings

Chat server URL

Event URL

Help page URL

Video/audio test page URL

Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable shortcut keys

Disable items in user interface—Predefined

Disable command bar buttons and menu items

Disable shortcut keys

• PUB11.adm—Microsoft Office Publisher 2003

  Tools | Macro—Security

Security Level

Trust all installed add-ins and templates

Miscellaneous

Disable Tools | Tools on the Web…

Prevent web pages displayed in Publisher from accessing the Office object model

Disable web view in the Office file dialogs

• RM11.adm—Information Rights Management

  (no security-related policies)

• SCRIB11.adm—Microsoft Office OneNote 2003

  Security

Saving personal information in OneNote files

• WORD11.adm—Microsoft Office Word 2003

  Tools | Options—General

  Tools | Macro—Security

Allow background open of web pages

Security Level

Trust all installed add-ins and templates

Trust access to Visual Basic Project

Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable shortcut keys

Disable items in user interface—Predefined

Disable command bar buttons and menu items

Disable shortcut keys