Hi,
I have an Excel SpreadSheet that we use in our company which includes
macros. Currently when users open it they are prompted to allow macros,
which some forget to do, meaning the functionality doesn't work as expected
and the support department get a call to assist.

To work around this I tried digitally self-signing the project which
worked for me but not anyone else unless they explicity accepted the
self-created certificate, which leaves me back in the position of requiring
user-interaction which I'd like to avoid.
I then placed the document in a network share and modified the Trust
Centre settings so that the share was specified in the Trusted Locations,
whilst also enabling the "Allow Trusted Locations on my network (not
recommended)". This works a treat, but still required a manual configuration
step by the users to set this up.

I then read through the documentation supplied by MS regarding how to
configure settings in the Trust Centre using Group Policy. This initially
worked a treat, I was able to set the network path into the "Policy
Locations" within Trusted Locations using the GP entry: User Configuration -
Administrative Templates - Microsoft Office 2007 systems - Security Settings
- Trust Centre - Trusted Location #1.

This however still required users to enable "Allow Trusted Locations on
my network (not recommended)". I found this setting against Excel in GP
under: User Configuration - Administrative Templates - Microsoft Office Excel
2007 - Security - Trust Centre - Trusted Locations - Allow Trusted Locations
not on the computer. I enabled this in the GP and ran gpupdate / force.
When I re-opened Excel the setting is still disabled, meaning users are
still prompted to enable macros. I've run rsop.msc on the client machine and
it shows that the above setting is enabled, even though I can still manually
enable and disable the value in Excel without the GP overriding anything.


Can someone please suggest what I might be doing wrong as I've already
spent a fair amount of time working this out and can't see what else needs to
be done to enable this.

Thanks in advance,
Andy