[Keebellah]

Hi,
I have posted this question with Microsoft Technet but no answer yet.
Based upon the following artikel:
http://www.microsoft.com/technet/sec.../MS01-050.mspx

Because of a question in the Business Applications forum there was a vbs script to run open an excel workbook and execute a macro.
What surprised me is that it absolutely disregards the security settings and in no way asks if you wish to allow or disable macro's.
I tried if in Office 2003 (not yet with 2007) and any level I set security is works, no prompt.
The macro is unsigned and I tried it at work where security is quite strict.

Any ideas? Leak in Microsoft Office security?

[rainforest123]

K:
The date of the TechNet bulletin you cited is from the year 2001; updated 2003.

The article states: "Microsoft Knowledge Base articles Q306603, Q306604, Q306605, Q306606 discuss href="http://support.microsoft.com/directory/question.asp?sd=gn&fr=0">Microsoft these issues and will be available approximately 24 hours after the release of this bulletin. Knowledge Base articles can be found on the Microsoft Online Support web site."

See,for example: http://support.microsoft.com/kb/306603

http://support.microsoft.com/kb/306604

http://support.microsoft.com/kb/306605

http://support.microsoft.com/kb/306606

I hope this reduces your concerns.

RF123

[Keebellah]

Thanks for looking.

The articles are interesting and there is a lot of speculation and if you read them well its a lot of bla bla.

I'm not really worried but Microsoft is so up on Security I consider this a serious leak.
Of course the receiver must actually have an Excel sheet or a Word document containing (malicious) macro's but the fact remains that setting macro security to a higher level is just a state of false security, and that is really my concern.
Apart from that, I'm happy I found the loophole and now my "automated" Execl sheets that read data from different sources and produces the requested information can run without my having to be present to press the "Allow Macros" button.

I'll leave this post open for a day or two and then close it as "solved"