Enabling/Disabling Macros

[Kevin]

We are migrating to SAP at the end of the year.

One of the SAP functions calls Excel and requires that Macros be enabled in
order to function.

I'm not wild about giving all my users free reign on Macros for secturity
reasons.

Is there a way to enable/disable macros based on how Excel is opened?

If they open it from Windows (double-click on icon, double-click on a
spreadsheet, open from a web page, etc) have macros disabled but if it is
opened from SAP have them enabled?

Worst case, I have to enable macros across the board in Excel, is there a
Group Policy setting I can set on the domain side rather than having to
visit all machines individually?

Thanks!

 

[Jezebel]

You can't do it quite as you describe, but there are some options. Read up
on code signing and certificates. You can set a Group Policy to require that
only signed macros can run, or that only macros from a trusted location (ie
loaded as add-ins) can run. One would hope that macros provided by SAP would
be signed (but Oracle's are not, damn their eyes!).

 

[Kevin]

You can't do it quite as you describe, but there are some options.
Read up on code signing and certificates. You can set a Group Policy
to require that only signed macros can run, or that only macros from a
trusted location (ie loaded as add-ins) can run. One would hope that
macros provided by SAP would be signed (but Oracle's are not, damn
their eyes!).

I like the sound of the group policy to allow macros from trusted sites -
but I'm having problems finding it in the Group Policy Editor (I'm no
expert, I just blunder around) - any idea where it is?

Thanks a ton!

 

[Jezebel]

Sorry, I'm not an expert either. I've just been a peripheral participant in
dealing with the same problem.