newbie new selfcert/macro question 2

[KR]

Based on Glenna Shaw's response to my last question, I went through the
selfcert process and created a certificate. I created a file (test.ppt) and
added a "hello world" msgbox macro, assigned the digital certificate in the
VBE, and saved the file.

On my own PC, when I open the file under high macro security, I get the
security warning box, with the following options: get details, disable
macros, enable macros, get more info, and there is a checkbox for "always
trust macros from this publisher". If I can get these options on all PC's, I
would be set- I can tell users to click "always trust..." then enable the
macros.

However, when I try to open the file on a different PC with high macro
security (our organization's default setting) that user gets the same
security warning box, except that the options to enable macros, and the
checkbox to "always trust..." are disabled/grey.

Is there any way for me to use a selfcert, and allow other users to trust my
macros (preferably "always trust...") without them having to reduce macro
security, and also without having to change anything more complicated on
their machine? Most users won't be comfortable moving files around anywhere
other than 'my documents'. I have no budget to get an external certificate,
so I'm stuck using self-cert or having to train everyone how to set macro
security to medium, assuming IT would even let me do that.

Thanks for any insight/suggestions-

Thanks,
Keith

 

[Shyam Pillai]

Keith,

Macro Security Levels in Office 2003
http://office.microsoft.com/en-us/assistance/HA011403071033.aspx

'Security must be set to Medium or High before any certificates are posted
to the trusted Trust Publishers list. In cases where security is set to High
on all computers, a Selfcert.exe-signed macro can be deployed, but it does
not have a secure enough certificate for use by other users who are running
with the High security level. Only a certificate issued by a certificate
authority can be used to provide a distributable certificate and signature
to others and still pass through Medium and High security levels in Office.'

 

[Steve Rindsberg]

Shyam seems to have the answer for you, if not the one you were hoping for.

But did you know that the user can set security to medium or low, install your
addin, checkmark "Always trust installed templates/addins" then put security
back to high and your addin will continue to work from then on?

 

[KR]

I didn't realize that, so that may be the path we take- I was just hoping to
avoid having to train remote users (many of whom are not PC literate) how to
change macro security settings. All in all, that is probably still easier
than convincing IT to roll out a company certificate to all PCs and allow me
to create a personal certificate from that