Downloads:

163

Downloads of v 0.0.1:

163

Last Update:

23 Jun 2018

Package Maintainer(s):

Software Author(s):

  • bcurran3

Tags:

bcurran3 office disable macros

Disable Office Macros (Config)

0.0.1 | Updated: 23 Jun 2018

Downloads:

163

Downloads of v 0.0.1:

163

Maintainer(s):

Software Author(s):

  • bcurran3

Disable Office Macros (Config) 0.0.1

This Package Contains an Exempted Check

1 Test Passing and 1 Exempted Test


Validation Testing Passed


Verification Testing Exempt:

Requires Office 2013 or 2016 to be installed.

To install Disable Office Macros (Config), run the following command from the command line or from PowerShell:

>

To upgrade Disable Office Macros (Config), run the following command from the command line or from PowerShell:

>

To uninstall Disable Office Macros (Config), run the following command from the command line or from PowerShell:

>

NOTE: This applies to both open source and commercial editions of Chocolatey.

1. Ensure you are set for organizational deployment

Please see the organizational deployment guide

  • Open Source or Commercial:
    • Proxy Repository - Create a proxy nuget repository on Nexus, Artifactory Pro, or a proxy Chocolatey repository on ProGet. Point your upstream to https://chocolatey.org/api/v2. Packages cache on first access automatically. Make sure your choco clients are using your proxy repository as a source and NOT the default community repository. See source command for more information.
    • You can also just download the package and push it to a repository Download

3. Enter your internal repository url

(this should look similar to https://chocolatey.org/api/v2)

4. Choose your deployment method:


choco upgrade disableofficemacros-winconfig -y --source="'STEP 3 URL'" [other options]

See options you can pass to upgrade.

See best practices for scripting.

Add this to a PowerShell script or use a Batch script with tools and in places where you are calling directly to Chocolatey. If you are integrating, keep in mind enhanced exit codes.

If you do use a PowerShell script, use the following to ensure bad exit codes are shown as failures:


choco upgrade disableofficemacros-winconfig -y --source="'STEP 3 URL'" 
$exitCode = $LASTEXITCODE

Write-Verbose "Exit code was $exitCode"
$validExitCodes = @(0, 1605, 1614, 1641, 3010)
if ($validExitCodes -contains $exitCode) {
  Exit 0
}

Exit $exitCode

- name: Ensure disableofficemacros-winconfig installed
  win_chocolatey:
    name: disableofficemacros-winconfig
    state: present
    version: 0.0.1
    source: STEP 3 URL

See docs at https://docs.ansible.com/ansible/latest/modules/win_chocolatey_module.html.

Coming early 2020! Central Managment Reporting available now! More information...


chocolatey_package 'disableofficemacros-winconfig' do
  action    :install
  version  '0.0.1'
  source   'STEP 3 URL'
end

See docs at https://docs.chef.io/resource_chocolatey_package.html.


Chocolatey::Ensure-Package
(
    Name: disableofficemacros-winconfig,
    Version: 0.0.1,
    Source: STEP 3 URL
);

Requires Otter Chocolatey Extension. See docs at https://inedo.com/den/otter/chocolatey.


cChocoPackageInstaller disableofficemacros-winconfig
{
   Name     = 'disableofficemacros-winconfig'
   Ensure   = 'Present'
   Version  = '0.0.1'
   Source   = 'STEP 3 URL'
}

Requires cChoco DSC Resource. See docs at https://github.com/chocolatey/cChoco.


package { 'disableofficemacros-winconfig':
  provider => 'chocolatey',
  ensure   => '0.0.1',
  source   => 'STEP 3 URL',
}

Requires Puppet Chocolatey Provider module. See docs at https://forge.puppet.com/puppetlabs/chocolatey.


salt '*' chocolatey.install disableofficemacros-winconfig version="0.0.1" source="STEP 3 URL"

See docs at https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.chocolatey.html.

5. If applicable - Chocolatey configuration/installation

See infrastructure management matrix for Chocolatey configuration elements and examples.

This package was approved by moderator Pauby on 12 Jul 2018.

Description

###WHAT'S THIS ALL ABOUT?

This package is for those who want to make their Microsoft Office installation more secure by disabling macros. Macros are a common method used by ransomware viruses. If you don't have a need for them, you should disable them! This package is designed for "normal" users as well as sysadmins who have to constantly configure computers and make sure they are all the same. Sure, sysadmins could use GPO to do this, but not all computers are in a domain. Good thing you have access to Chocolatey! I put Chocolatey on just about every box I touch... so I made this Chocolatey package for super simple disabling of Office macros, well, really so I can add it to my setup scripts. This is part of a series of "-winconfig" packages for configuration automation. Others include desktopicons-winconfig, explorer-winconfig, homepages-winconfig, and taskbar-winconfig

###FEATURES:

This package disables VBA macros in Office 2013 and 2016 using Group Policy registry settings. After installing this package users will NOT be able to change their Macro Settings in the Trust Center.

  • Disables VBA macros for Access
  • Disables VBA macros for Excel
  • Disables VBA macros for Outlook
  • Disables VBA macros for PowerPoint
  • Disables VBA macros for Project
  • Disables VBA macros for Publisher
  • Disables VBA macros for Word

There is no upgrade path for this package. disableofficemacros-winconfig is a "one and done" package. Settings changes only effect the currently logged in user. Settings will be removed upon uninstall. It is recommended to reinstall again with -force under different user accounts.

If you find disableofficemacros-winconfig useful, please consider donating: https://www.paypal.me/bcurran3donations

PACKAGE NOTES


tools\.SkipAutoUninstaller
 
tools\ChocolateyInstall.ps1
$packageName = 'disableofficemacros-winconfig'

# Office 2013
if (Test-Path -Path "HKCU:\SOFTWARE\Microsoft\Office\15.0")
    {
	$found = "true"
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0"	-ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Access" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Access\Security" -ea SilentlyContinue | Out-Null	 
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Excel" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Excel\Security" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Outlook" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Outlook\Security" -ea SilentlyContinue | Out-Null	 	 	 	 	 
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\PowerPoint" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\PowerPoint\Security" -ea SilentlyContinue | Out-Null	 	 	 
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\MS Project" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\MS Project\Security" -ea SilentlyContinue | Out-Null	 	 
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Publisher" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Publisher\Security" -ea SilentlyContinue | Out-Null	 
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Word" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Word\Security" -ea SilentlyContinue | Out-Null	 	 	 

	 Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Access\Security" -Name "VBAWarnings" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null
	 Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Excel\Security" -Name "VBAWarnings" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null
	 Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Outlook\Security" -Name "level" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null	 	 
	 Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\PowerPoint\Security" -Name "VBAWarnings" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null
	 Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\MS Project\Security" -Name "VBAWarnings" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null	 	 
     Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Publisher\Security" -Name "VBAWarnings" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null	 
	 Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Word\Security" -Name "VBAWarnings" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null
	 Write-Host "** Office 2013 macros disabled. **" -foreground magenta
    }

# Office 2016
if (Test-Path -Path "HKCU:\SOFTWARE\Microsoft\Office\16.0")
    {
	$found = "true"
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0"	-ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Access" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Access\Security" -ea SilentlyContinue | Out-Null	 
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Excel" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Excel\Security" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Outlook" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Outlook\Security" -ea SilentlyContinue | Out-Null	 	 	 	 
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint\Security" -ea SilentlyContinue | Out-Null	 	 	 
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\MS Project" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\MS Project\Security" -ea SilentlyContinue | Out-Null	 	 	 	 
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Publisher" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Publisher\Security" -ea SilentlyContinue | Out-Null	 
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Word" -ea SilentlyContinue | Out-Null
	 New-Item -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Word\Security" -ea SilentlyContinue | Out-Null	 	 	 

	 Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Access\Security" -Name "VBAWarnings" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null
	 Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Excel\Security" -Name "VBAWarnings" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null
	 Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Outlook\Security" -Name "level" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null	 
	 Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint\Security" -Name "VBAWarnings" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null
	 Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\MS Project\Security" -Name "VBAWarnings" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null	 
     Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Publisher\Security" -Name "VBAWarnings" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null	 
	 Set-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Word\Security" -Name "VBAWarnings" -Value 4 -Type DWord -Force -ea SilentlyContinue | Out-Null
	 Write-Host "** Office 2016 macros disabled. **" -foreground magenta
    }

if ($found){
	} else {
	  Write-Host "Office not found. Aborting..." -foreground yellow
	  throw
	}
tools\ChocolateyUninstall.ps1
$packageName = 'disableofficemacros-winconfig'

# Office 2013
if (Test-Path -Path "HKCU:\Software\Policies\Microsoft\Office\15.0")
    {
	 Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Access\Security" -Name "VBAWarnings" -ea SilentlyContinue
     Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Excel\Security" -Name "VBAWarnings" -ea SilentlyContinue
	 Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Outlook\Security" -Name "level" -ea SilentlyContinue
	 Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\PowerPoint\Security" -Name "VBAWarnings" -ea SilentlyContinue
	 Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\MS Project\Security" -Name "VBAWarnings" -ea SilentlyContinue
     Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Publisher\Security" -Name "VBAWarnings" -ea SilentlyContinue
	 Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\15.0\Word\Security" -Name "VBAWarnings" -ea SilentlyContinue
	 Write-Host "** Removing Office 2013 macro security settings. **" -foreground magenta
    }

# Office 2016
if (Test-Path -Path "HKCU:\Software\Policies\Microsoft\Office\16.0")
    {
	 Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Access\Security" -Name "VBAWarnings" -ea SilentlyContinue
     Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Excel\Security" -Name "VBAWarnings" -ea SilentlyContinue
	 Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Outlook\Security" -Name "level" -ea SilentlyContinue
	 Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint\Security" -Name "VBAWarnings" -ea SilentlyContinue
	 Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\MS Project\Security" -Name "VBAWarnings" -ea SilentlyContinue	 
     Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Publisher\Security" -Name "VBAWarnings" -ea SilentlyContinue
	 Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Office\16.0\Word\Security" -Name "VBAWarnings" -ea SilentlyContinue
	 Write-Host "** Removing Office 2016 macro security settings. **" -foreground magenta
    }

In cases where actual malware is found, the packages are subject to removal. Software sometimes has false positives. Moderators do not necessarily validate the safety of the underlying software, only that a package retrieves software from the official distribution point and/or validate embedded software against official distribution point (where distribution rights allow redistribution).

Chocolatey Pro provides runtime protection from possible malware.

Version Downloads Last Updated Status

###CHANGELOG:

  • 0.0.1 initial release

This package has no dependencies.

Discussion for the Disable Office Macros (Config) Package

Ground Rules:

  • This discussion is only about Disable Office Macros (Config) and the Disable Office Macros (Config) package. If you have feedback for Chocolatey, please contact the Google Group.
  • This discussion will carry over multiple versions. If you have a comment about a particular version, please note that in your comments.
  • The maintainers of this Chocolatey Package will be notified about new comments that are posted to this Disqus thread, however, it is NOT a guarantee that you will get a response. If you do not hear back from the maintainers after posting a message below, please follow up by using the link on the left side of this page or follow this link to contact maintainers. If you still hear nothing back, please follow the package triage process.
  • Tell us what you love about the package or Disable Office Macros (Config), or tell us what needs improvement.
  • Share your experiences with the package, or extra configuration or gotchas that you've found.
  • If you use a url, the comment will be flagged for moderation until you've been whitelisted. Disqus moderated comments are approved on a weekly schedule if not sooner. It could take between 1-5 days for your comment to show up.
comments powered by Disqus