Setting Access' Macro Security=Low For All Users?

[PeteCresswell]

Is there any way to set Microsoft Access' "Macro Security" (as in
Tools | Macro | Security | Security Level) to "Low" for all users?

Or does it have tb done on a user-by-user basis?

 

[Tom van Stiphout]

On Tue, 28 Apr 2009 07:34:01 -0700 (PDT), PeteCresswell

You're talking about the multiple users on a machine? I think this is
per-user.
Can you work with Trusted Locations and/or digitally sign your
projects so you don't have to do this?

-Tom.
Microsoft Access MVP

 

[PeteCresswell]

On Tue, 28 Apr 2009 07:34:01 -0700 (PDT), PeteCresswell

You're talking about the multiple users on a machine? I think this is
per-user.
Can you work with Trusted Locations and/or digitally sign your
projects so you don't have to do this?

In a sense. We're in a Citrix environment. As new users come on
board, they get a level of "Medium" assigned by default.

Maybe my question SHB "Is there any way to change the default
level?"....

The admins have the environment locked down so that an ordinary user
cannot access (no pun intended...) Tools | Macro | Security.

I don't think the "Trusted Locations" or digital signature is going to
fly around here. I'm pretty much clueless on both except that I seem
to recall that they require working with some external-to-the-user-
group security/administrative entity; which I don't even know exists
in this company.

So maybe I'm back to some way to change the default security level
from "Medium" to "Low".

 

[PeteCresswell]

So maybe I'm back to some way to change the default security level

from "Medium" to "Low".

I think I've answered my own question.

Application.AutomationSecurity = msoAutomationSecurityForceDisable
(per http://support.microsoft.com/kb/317405)

We still have a chicken-egg issue with an "Admin" id that is used to
schedule .BAT files in the wee hours of the morning, but it seems that
if we can get the admins to manually set that user's macro security
level, we're home free.b

 

[Paul Shapiro]

If your domain has a certificate authority which is trusted by all users,
your admins can issue you a code-signing certificate. Once you install the
certificate to your machine, with the private key, you can sign the Access
mdb before distributing it. In the VBA editor, go to Tools, Digital
Signature, and select your certificate. Since your cert is traced to the
domain-wide authority, all domain-joined workstations (which should include
the Citrix sessions) should trust your application. Otherwise, you can buy a
code signing cert from someone like Thawte for about $500 for a 2-year
certificate.

On Tue, 28 Apr 2009 07:34:01 -0700 (PDT), PeteCresswell

You're talking about the multiple users on a machine? I think this is
per-user.
Can you work with Trusted Locations and/or digitally sign your
projects so you don't have to do this?

In a sense. We're in a Citrix environment. As new users come on
board, they get a level of "Medium" assigned by default.

Maybe my question SHB "Is there any way to change the default
level?"....

The admins have the environment locked down so that an ordinary user
cannot access (no pun intended...) Tools | Macro | Security.

I don't think the "Trusted Locations" or digital signature is going to
fly around here. I'm pretty much clueless on both except that I seem
to recall that they require working with some external-to-the-user-
group security/administrative entity; which I don't even know exists
in this company.

So maybe I'm back to some way to change the default security level
from "Medium" to "Low".