

In addition, if I turn off the setting to disable the trust bar notifications, Office shows

However after updating from .2084 to .2102, Office will not allow any add-ins or macros to run with these settings in place. These settings have been working as expected, only allowing add-ins and macros to run from templates that have valid digital signatures which have been imported to the trusted publishers certificate store on the local computer, for all previous VBA Macro Notification Settings: Enabled (Disabled all except digitally signed macros).Trust access to Visual Basic Project: Disabled.Require that application add-ins are signed by Trusted Publisher: Enabled.Disable Trust Bar Notification for unsigned application add-ins and block them: Enabled.We have the Office security settings locked down by GPO as below. We use a number of macro template files and add-ins for office all of which have valid digital signatures that are imported to the trusted publishers certificate store on all machines. You can check out the preview of the new warning bar right below.We recently attempted to update to the latest First Release for Deferred channel Version 1705 (Build 8201.2102) for Microsoft Office 2016 (C2R) and have run into what seem to be some fairly major problems around VBA and add-in security settings. There won’t be an easy way to download the macros from now on. Although Microsoft introduced a warning sign that shows the risk of enabling VBA macros in Office documents obtained from the web, users could still enable them.Īs a result, the “ impact can be severe including malware, compromised identity, data loss, and remote access.” However, with this new policy in place, Microsoft will entirely disable VBA macros in Office and show a new warning bar, notifying the user about the change along with a “Learn More” button. While the feature was pretty useful, hackers have been using VBA macros in Office documents to send malicious programs to users, who unknowingly enable them after downloading the file from the internet. The company rolled out the feature to its other applications with Office 97. It means that Office users will not be able to enable certain content on Office files with a simple click of a button.įor those unaware, Microsoft Office has been supporting VBA macros, which allows users to run custom-generated functions with easy access, since the release of Excel 5.0 in 1993. Microsoft, via a blog post, announced that it will disable VBA macros obtained from the internet by default.
