Access 2007 Trusted Locations All Users TS

[petebob796]

At work we have a terminal services setup for most of the staff which is being configured now. We have hit a snag with access security settings basically we need macros to run for relinking odbc databases and various vba functions (some run overnight so we don't want to deal with the security dialogs). We though the best way to do this would be setup trusted locations. We did this logged in to terminal server as admin hoping this would be a machine level setting but it seems to be on a per user basis.

Is there a way to set a trusted location for all users of a machine I have google and come up with nothing. The other option is enable all macros which I don't want to do.

 

[dsfcom]

I too am curious. Our computers are set up so that users cannot tamper with security settings, trusted locations, etc. and I'd like to modify the registry during database startup to allow the macros/code in my db to function without warnings etc. There should be a way to do this but I've no idea which keys to add where during first run after clicking "allow content" once.

 

[petebob796]

How I did it

I posted this a long time ago but since you are interested I found out that unfortunately the settings are per user only there are no global settings. So I setup on the logon script for the users that it would add the appropriate trusted locations. I don't have the registry entries to hand that are edited but if you use Process Monitor (free download) and add a trusted location you can work out the registry keys to edit/create on logon of the user since our profiles are mandatory this has to be done every time but if you are using roaming profiles you could obviously just do it once.

We chose this method as we also needed to perform a similar task for all users to make internet explorer check for a new version of a web page everytime as it was causing havoc with a web enable database system.

 

[petebob796]

forgot

You can't do this at db startup since vba code is stopped until you click through and allow it to run which would make it pointless. Also even if you could access would have to close and reopen to read the appropriate registry entry. Try it as a logon script at user startup I did it with a vb6 exe

 

[dsfcom]

Found it easiest to digitally sign. My users have PKI/CAC infrastructure so they can trust my app without any problems.