Microsoft Office 2003 Editions Resource Kit [Electronic resources] نسخه متنی

Office Security-related Policies

Provided in this section are policies related to security settings of Microsoft Office 2003 Editions applications. This same information can be found by examining the various ADM policy templates that are included with the Office Resource Kit and are installed during a typical installation.

The policies presented here are listed by the respective ADM policy template, policy grouping, and then the security-related policy text name. The registry key is not documented here. However, it is possible to find the registry key in the ADM template and then copy that key information and the possible data value you may need to put into a REG file or to use with the Add/Remove Registry Entries page of the Custom Installation Wizard or Custom Maintenance Wizard. Copying the registry entry is not a recommended step in deploying policies; use of Active Directory is the recommended method of policy propagation to users on a corporate network.

AER_1033.adm—Automatic Error Reporting (replacement for dw20.adm)

General Reporting

Disable error reporting

Do not upload user documents

Do not upload any additional data

Corporate Error Reporting

Hide Don’t Send button

URL to launch after reporting

URL to explain why user should report

Queued Reporting

Bypass queue and send all reports

Send all queued reports silently

ACCESS11.adm—Microsoft Office Access 2003

Tools | Macro—Security

Security Level

Trust all installed add-ins and templates

Trust access to Visual Basic Project

Tools | Security—Workgroup Administrator

Path to shared Workgroup information file for secured MDB files

Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable shortcut keys

Disable items in user interface—Predefined

Disable command bar buttons and menu items

Disable shortcut keys

Miscellaneous

Do not prompt to convert older databases

EXCEL11.adm—Microsoft Office Excel 2003

Tools | Macro—Security

Security Level

Trust all installed add-ins and templates

Trust access to Visual Basic Project

Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable shortcut keys

Disable items in user interface—Predefined

Disable command bar buttons and menu items

Disable shortcut keys

Miscellaneous

OLAP PivotTable User Defined Function (UDF) security setting

FP11.adm—Microsoft Office FrontPage 2003

Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable items in user interface—Predefined

Disable command bar buttons and menu items

GAL11.adm—Microsoft Clip Organizer

Disable Clips Online access from Clip Organizer

Clip Organizer Online URL

Disable menu item: File | Send to Mail Recipient (as Attachment)

Disable menu item: Tools | Tools on the Web…

Prevent automatically importing clips

Prevent users from importing new clips

INF11.adm—Microsoft Office InfoPath 2003

Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable items in user interface—Predefined

Disable command bar buttons and menu items

Disable shortcut keys

Security

Disable opening of solutions from the Internet security zone

Disable installed solutions full access to machine

INSTLR11.adm—Windows Installer

Always install with elevated privileges

OFFICE11.adm—Microsoft Office 2003

Tools | AutoCorrect options…

Check for new actions URL

Tools | Options | General | Service Options—Online Content

Online Content Options

Help—Help | Privacy Settings

Enable Customer Experience Improvement Program

Help—Help | Detect and Repair

Discard my customized settings and restore default settings

Security Settings

Disable VBA for Office applications

Unsafe ActiveX Initialization

Automation Security

Prevent users from changing Office encryption settings

Specify Trusted Alert Sources

Prevent Word and Excel from loading managed code extensions

Shared paths

Web Query dialog home Page

Save My Settings Wizard

Prevent users from uploading settings to the internet

Default location to store settings file (OPS)

Help on the Web

Feedback URL

Customizable Error Messages

Base URL

Disable items in user interface

Disable Information Rights Management User Interface

Services

Disable Fax Over Internet feature

Instance Messaging Integration

Allow IM to query people not on the buddy list

Manage Restricted Permissions

Additional permissions request URL

Make document with restricted documents viewable in trusted browsers

Always require users to connect to verify permissions

Never allow users to specify groups when restricting permission for document

Miscellaneous

Do not upload media files

Disable hyperlinks to web templates in File | New and task panes

Prevent access to Web-based file storage

Disable web view in the Office file dialogs

OUTLK11.adm—Microsoft Office Outlook 2003

Tools | Macro—Security

Security Level

Outlook: Trust all installed add-ins and templates

Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable shortcut keys

Disable items in user interface—Predefined

Disable command bar buttons and menu items

Disable shortcut keys

Outlook Today settings

URL for custom Outlook Today

Miscellaneous

NetMeeting

Junk e-mail filtering

Auto-repair of MAPI32.DLL

Prevent users from adding e-mail account types

Prevent users from making changes to Outlook profiles

PPT11.adm—Microsoft Office PowerPoint 2003

Tools | Options—Edit

Password protection

Tools | Macro—Security

Security Level

Trust all installed add-ins and templates

Trust access to Visual Basic Project

Slide Show | Online Broadcast | Setup and Schedule—Broadcast settings

Send audio

Send video

Slide Show | Online Broadcast | Setup and Schedule—Broadcast settings—Other Broadcast Settings

Chat server URL

Event URL

Help page URL

Video/audio test page URL

Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable shortcut keys

Disable items in user interface—Predefined

Disable command bar buttons and menu items

Disable shortcut keys

PUB11.adm—Microsoft Office Publisher 2003

Tools | Macro—Security

Security Level

Trust all installed add-ins and templates

Miscellaneous

Disable Tools | Tools on the Web…

Prevent web pages displayed in Publisher from accessing the Office object model

Disable web view in the Office file dialogs

RM11.adm—Information Rights Management

(no security-related policies)

SCRIB11.adm—Microsoft Office OneNote 2003

Security

Saving personal information in OneNote files

WORD11.adm—Microsoft Office Word 2003

Tools | Options—General

Tools | Macro—Security

Allow background open of web pages

Security Level

Trust all installed add-ins and templates

Trust access to Visual Basic Project

Disable items in user interface—Custom

Disable command bar buttons and menu items

Disable shortcut keys

Disable items in user interface—Predefined

Disable command bar buttons and menu items

Disable shortcut keys