Macro security

[microsoft]

How do i change the Defalt on the Macro security level in Access to low on
installation or even post installation? I know how to change the level but
it does not change for all users.

 

['69 Camaro]

I know how to change the level but

it does not change for all users.

Of course not. If multiple users are using the same computer, one user's
macro security settings should not affect any other user's settings. For
example, if I set my default settings to "High" and we use the same
computer, would you want to be stuck with that same annoying setting, too?
No, thank you!

You'll have to change the macro security setting for each user's profile.

HTH.

Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips.

(Please remove ZERO_SPAM from my reply E-mail address, so that a message
will be forwarded to me.)

 

[Brendan Reynolds]

I'm guessing that possibly Bruce (?) may be rolling out an administrative
installation to all users on a network. I've seen that question asked
before. Unfortunately, I don't remember ever seeing it answered.
--
Brendan Reynolds (MVP)
http://brenreyn.blogspot.com

The spammers and script-kiddies have succeeded in making it impossible for
me to use a real e-mail address in public newsgroups. E-mail replies to
this post will be deleted without being read. Any e-mail claiming to be
from brenreyn at indigo dot ie that is not digitally signed by me with a
GlobalSign digital certificate is a forgery and should be deleted without
being read. Follow-up questions should in general be posted to the
newsgroup, but if you have a good reason to send me e-mail, you'll find
a useable e-mail address at the URL above.

 

['69 Camaro]

Hi, Brendan.

I'm guessing that possibly Bruce (?) may be rolling out an administrative
installation to all users on a network.

I agree. I think that he'll need to write a script to change the Registry,
and run the script when each user logs in. That's not as efficient as any
system administrator would want to be, but it doesn't look like there's a
choice.

To set the macro security to low, two Registry keys need to be set, one for
LOCAL_MACHINE, and the other for CURRENT_USER. Values in Registry keys for
CURRENT_USER aren't always persistent. It appears that the value for the
Access security level isn't.

HTH.

Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips.

(Please remove ZERO_SPAM from my reply E-mail address, so that a message
will be forwarded to me.)

 

[Paul Overway]

The following registry entries need to be made:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Jet\4.0\Engines]
"SandBoxMode"=dword:00000002

[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Access\Security]
"Level"=dword:00000001

 

['69 Camaro]

Hi, Paul.

The second Registry key that you listed:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Access\Security]
"Level"=dword:00000001

.... is not created during Microsoft Office 2003 Pro installation. Have you
seen this work for the Access Macro Security setting for "low" when
administrators manually create this key (or with a script to create it)? Or
does the security level for the similar CURRENT_USER Registry key override
it?

Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips.

(Please remove ZERO_SPAM from my reply E-mail address, so that a message
will be forwarded to me.)

The following registry entries need to be made:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Jet\4.0\Engines]
"SandBoxMode"=dword:00000002

[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Access\Security]
"Level"=dword:00000001


--
Paul Overway
Logico Solutions
http://www.logico-solutions.com

How do i change the Defalt on the Macro security level in Access to low on
installation or even post installation? I know how to change the level but
it does not change for all users.

 

[Paul Overway]

Yes...it does work. I haven't checked for sure whether Current_User takes
precedence, but I suspect not.

--
Paul Overway
Logico Solutions
http://www.logico-solutions.com

Hi, Paul.

The second Registry key that you listed:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Access\Security]
"Level"=dword:00000001

... is not created during Microsoft Office 2003 Pro installation. Have you
seen this work for the Access Macro Security setting for "low" when
administrators manually create this key (or with a script to create it)? Or
does the security level for the similar CURRENT_USER Registry key override
it?

Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips.

(Please remove ZERO_SPAM from my reply E-mail address, so that a message
will be forwarded to me.)

The following registry entries need to be made:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Jet\4.0\Engines]
"SandBoxMode"=dword:00000002

[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Access\Security]
"Level"=dword:00000001


--
Paul Overway
Logico Solutions
http://www.logico-solutions.com

How do i change the Defalt on the Macro security level in Access to

low

on

 

['69 Camaro]

Hi, Paul.

Thanks for the info. We found a Microsoft employee who, after researching
Microsoft's non-public KB, posted a recommendation for using the
CURRENT_USER Registry key:

http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&c2coff=1&th=741d7ee04c499967&rnum=1

And we had a report from our Windows system administrator that the
CURRENT_USER Registry key overrides the equivalent LOCAL_MACHINE key in this
situation. If your experience is otherwise, then we would need to address
this issue. That's why I was asking.

Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips.

(Please remove ZERO_SPAM from my reply E-mail address, so that a message
will be forwarded to me.)

Yes...it does work. I haven't checked for sure whether Current_User takes
precedence, but I suspect not.

--
Paul Overway
Logico Solutions
http://www.logico-solutions.com


message news:[email protected]...

Hi, Paul.

The second Registry key that you listed:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Access\Security]
"Level"=dword:00000001

... is not created during Microsoft Office 2003 Pro installation. Have you
seen this work for the Access Macro Security setting for "low" when
administrators manually create this key (or with a script to create it)? Or
does the security level for the similar CURRENT_USER Registry key override
it?

Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips.

(Please remove ZERO_SPAM from my reply E-mail address, so that a message
will be forwarded to me.)

The following registry entries need to be made:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Jet\4.0\Engines]
"SandBoxMode"=dword:00000002

[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Access\Security]
"Level"=dword:00000001


--
Paul Overway
Logico Solutions
http://www.logico-solutions.com


How do i change the Defalt on the Macro security level in Access to

low

on
installation or even post installation? I know how to change the

level
but

it does not change for all users.

 

[Paul Overway]

As to whether Current_User overrides Local_Machine, I would hope not. The
idea behind using Local_Machine is to set the macro level for the machine.
If the machine administrator has deliberately configured the PC in this
manner, it doesn't make sense that Current_User would be able to override
the setting. Whether the machine administrator sets it low or high,
current_user shouldn't be able to circumvent the machine administrator's
preference.

Aside from Microsoft's stupidity in implementing security on Access
database, what is there to address?

--
Paul Overway
Logico Solutions
http://www.logico-solutions.com

Hi, Paul.

Thanks for the info. We found a Microsoft employee who, after researching
Microsoft's non-public KB, posted a recommendation for using the
CURRENT_USER Registry key:

http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&c2coff=1&th=741d7ee04c499967&rnum=1

And we had a report from our Windows system administrator that the
CURRENT_USER Registry key overrides the equivalent LOCAL_MACHINE key in this
situation. If your experience is otherwise, then we would need to address
this issue. That's why I was asking.

Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips.

(Please remove ZERO_SPAM from my reply E-mail address, so that a message
will be forwarded to me.)

Yes...it does work. I haven't checked for sure whether Current_User takes
precedence, but I suspect not.

--
Paul Overway
Logico Solutions
http://www.logico-solutions.com


message news:[email protected]...

Hi, Paul.

The second Registry key that you listed:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Access\Security]
"Level"=dword:00000001

... is not created during Microsoft Office 2003 Pro installation.

Have
you

seen this work for the Access Macro Security setting for "low" when
administrators manually create this key (or with a script to create

it)?
Or

does the security level for the similar CURRENT_USER Registry key override
it?

Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips.

(Please remove ZERO_SPAM from my reply E-mail address, so that a message
will be forwarded to me.)


The following registry entries need to be made:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Jet\4.0\Engines]
"SandBoxMode"=dword:00000002

[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Access\Security]
"Level"=dword:00000001


--
Paul Overway
Logico Solutions
http://www.logico-solutions.com


How do i change the Defalt on the Macro security level in Access

to
low

on
installation or even post installation? I know how to change the level
but
it does not change for all users.

 

['69 Camaro]

Hi, Paul.

Thanks for the info.

what is there to address?

Our clients expect us to _always_ have the correct solutions and up-to-date
information, so we need to update our internal knowledge base if our
knowledge base contains incorrect information.

Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips.

(Please remove ZERO_SPAM from my reply E-mail address, so that a message
will be forwarded to me.)

As to whether Current_User overrides Local_Machine, I would hope not. The
idea behind using Local_Machine is to set the macro level for the machine.
If the machine administrator has deliberately configured the PC in this
manner, it doesn't make sense that Current_User would be able to override
the setting. Whether the machine administrator sets it low or high,
current_user shouldn't be able to circumvent the machine administrator's
preference.

Aside from Microsoft's stupidity in implementing security on Access
database, what is there to address?

--
Paul Overway
Logico Solutions
http://www.logico-solutions.com


message news:[email protected]...

Hi, Paul.

Thanks for the info. We found a Microsoft employee who, after researching
Microsoft's non-public KB, posted a recommendation for using the
CURRENT_USER Registry key:

http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&c2coff=1&th=741d7ee04c499967&rnum=1

And we had a report from our Windows system administrator that the
CURRENT_USER Registry key overrides the equivalent LOCAL_MACHINE key in this
situation. If your experience is otherwise, then we would need to address
this issue. That's why I was asking.

Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips.

(Please remove ZERO_SPAM from my reply E-mail address, so that a message
will be forwarded to me.)

Yes...it does work. I haven't checked for sure whether Current_User takes
precedence, but I suspect not.

--
Paul Overway
Logico Solutions
http://www.logico-solutions.com


"'69 Camaro" <[email protected]_SPAM>

wrote
in

message Hi, Paul.

The second Registry key that you listed:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Access\Security]
"Level"=dword:00000001

... is not created during Microsoft Office 2003 Pro installation. Have
you
seen this work for the Access Macro Security setting for "low" when
administrators manually create this key (or with a script to create it)?
Or
does the security level for the similar CURRENT_USER Registry key override
it?

Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips.

(Please remove ZERO_SPAM from my reply E-mail address, so that a message
will be forwarded to me.)


The following registry entries need to be made:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Jet\4.0\Engines]
"SandBoxMode"=dword:00000002

[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Access\Security]
"Level"=dword:00000001


--
Paul Overway
Logico Solutions
http://www.logico-solutions.com


How do i change the Defalt on the Macro security level in Access to
low
on
installation or even post installation? I know how to change the level
but
it does not change for all users.