Answered by:
Disable - Trust all documents from this publisher

Question
-
Hello,
I want to allow in Word only macros signed by trusted publishers, if I use the macro setting "Disable all macros except digitally signed macros" on a document with macros signed by a non-trusted publisher, I can trust from Word all the documents from this publisher and then the publisher becomes a trusted publisher. Is there a way to prevent this? I don't want Office to allow the users to trust a publisher from there. Is it possible to disable this?
Wednesday, April 19, 2017 1:00 PM
Answers
-
Thanks, I actually use the GPO
Security Settings/Public Key Policies/Certificate Path Validation Settings/Trusted Publishers
Trusted Publishers can be managed by: All administrators only So that only admins can add certificates to trusted publishers, and although it's possible to click on "Trust all documents from this publisher", it's not added
- Marked as answer by inbilbao Tuesday, May 2, 2017 2:04 PM
Tuesday, May 2, 2017 2:03 PM
All replies
-
Cross-posted at: https://answers.microsoft.com/en-us/msoffice/forum/msoffice_word-mso_win10/disable-trust-all-documents-from-this-publisher/0e335bb8-6d4f-42b0-b874-10249becb5b2
For cross-posting etiquette, please read: http://www.excelguru.ca/content.php?184In answer your question, you need to configure the appropriate Group Policy settings. See: https://technet.microsoft.com/en-us/library/cc178948%28v=office.12%29.aspx
Cheers
Paul Edstein
[MS MVP - Word]Wednesday, April 19, 2017 8:04 PM -
Which polic exactly? I had already configured the ones for trusted locations but what I want is that the user is not allowed to trust the publisher from Word. Which policy does that?
Thanks
Thursday, April 20, 2017 7:01 AM -
Not having a volume-license edition of Office, I can't be certain, but it appears you should be able to either remove users' access to Trusted Publishers and/or require Administrator privileges for such access. Perhaps the following links will provide more help:
https://technet.microsoft.com/en-us/library/ff400327.aspx
https://technet.microsoft.com/en-us/library/cc179097.aspxCheers
Paul Edstein
[MS MVP - Word]Thursday, April 20, 2017 7:49 AM -
Thanks, I actually use the GPO
Security Settings/Public Key Policies/Certificate Path Validation Settings/Trusted Publishers
Trusted Publishers can be managed by: All administrators only So that only admins can add certificates to trusted publishers, and although it's possible to click on "Trust all documents from this publisher", it's not added
- Marked as answer by inbilbao Tuesday, May 2, 2017 2:04 PM
Tuesday, May 2, 2017 2:03 PM