Configure macro settings

search account_circle

boltEssential 8

Configure macro settings

11 controls in this part of theASD Essential Eight. Each control links to plain-English guidance, audit tips and cross-framework mappings.

Disable Microsoft Office macros for users without a business need

Ensure only users with a specific business need can run Microsoft Office macros.

Block Microsoft Office macros from the internet

Prevent macros in files from the internet from being opened in Microsoft Office.

Enable antivirus scanning for Microsoft Office macros

Ensure antivirus scanning is active for macros in Microsoft Office documents.

Prevent users from changing Microsoft Office macro security settings

Ensure users cannot alter macro settings in Microsoft Office applications.

Microsoft Office macros are blocked from making Win32 API calls

Block Office macros from running code that interacts directly with Windows.

Restrict Microsoft Office macros to only trusted or sandboxed environments

Allow only macros from trusted locations, sandboxes, or signed by trusted publishers.

Check Microsoft Office macros for malicious code before signing or trusting

Ensure Office macros are safe from malicious code before trusting or signing.

Only privileged users can modify content in Trusted Locations

Ensure that only specific users can edit trusted macro locations to prevent malicious code.

Untrusted Publisher Macros Cannot Be Enabled via Message Bar or Backstage View

Block untrusted Microsoft Office macros from being enabled using standard interface warnings.

Block enabling of non-V3 signed Microsoft Office macros via Message Bar

Prevent enabling of macros not signed with V3 signatures using standard Office UI controls.

Validate list of trusted publishers in Microsoft Office annually

Regularly check and confirm trusted publishers in Microsoft Office to prevent unauthorized macro use

Back to the full Essential Eight mitigation strategies control list, or browse the complete control library.