I sign macros in my office documents and I have my macro security set to high.

How do I roll out the certificate for macro signature verification to all
hosts in an AD domain in an automated way so that these signed macros (but
only these!) are executed under a "high" security setting without the user
having to answer to any dialog box ("Do you trust this signer?")?

Thanks,
Martin