Forum Discussion
Using GPO to manage macros
For most of my users, macros are only likely to be encountered in stray spam/phishing emails that broach our various defences. I'd like to block their operation if I can and have followed some of the tips https://4sysops.com/archives/restricting-or-blocking-office-2016-2019-macros-with-group-policy/#force-verification-by-virus-scanner to create a test GPO that will prevent most users from inadvertently running any illegitimate code.
The main issue I've uncovered so far though is that it highlights various add-ins that Outlook loads on start-up, including several from MS itself (Exchange Add-in, Teams etc.) and from my AV supplier, TeamViewer etc., each asking to enable or disable, with the option to "Trust all documents from this publisher":
I don't want to go to the trouble of warning all my users that macros are bad then tell them to simply "Trust all" for every warning on Outlook startup - seems kinda counterintuitive! Is there a way I can push this trust out via GPO to AD workstations? I tried to track the certificate one of the warnings installed in an attempt to do this but I couldn't subsequently find it. Is there a way to simply trust - across the AD - certificates published by Microsoft and ESET?
thanks for any help in advance,
Calum