In this article
VBA macros are a comtháng way for malicious actors to gain access lớn deploy malware & ransomware. Therefore, to lớn help improve sầu security in Office, we’re changing the default behavior of Office applications to bloông chồng macros in files from the mạng internet.
Bạn đang xem: Cách bật macro trong excel 2010, 2013, 2016 cực kỳ đơn giản
With this change, when users open a file that came from the mạng internet, such as an email attachment, & that tệp tin contains macros, the following message will be displayed:
The Learn More button goes to an article for kết thúc users và information workers that contains information about the security risk of bad actors using macros, safe practices to prevent phishing & malware, & instructions on how to lớn enable these macros (if absolutely needed).
In some cases, users will also see the message if the tệp tin is from a location within your intranet that’s not identified as being trusted. For example, if users are accessing files on a network tóm tắt by using the share"s IP.. address. For more information, see Files centrally located on a network cốt truyện or trusted website.
Important
Even before this change we"re introducing, organizations could use the Bloông chồng macros from running in Office files from the Internet policy lớn prevent users from inadvertently opening files from the internet that contain macros. We recommend enabling this policy as part of the security baseline for alokapidakaldim.com 365 Apps for enterprise. If you vì chưng configure the policy, your organization won’t be affected by this mặc định change.
For more information, see Use policies khổng lồ manage how Office handles macros.
Prepare for this change
To prepare for this change, we recommend that you work with the business units in your organization that use macros in Office files that are opened from locations such as intranet network shares or intranet websites. You"ll want khổng lồ identify those macros and determine what steps to lớn take khổng lồ keep using those macros. You"ll also want lớn work with independent software vendors (ISVs) that provide macros in Office files from those locations. For example, khổng lồ see if they can digitally sign their code and you can treat them as a trusted publisher.
Also, reviews the following information:
| Understvà which versions và which update channels have sầu this change (as we roll out this change) | Versions of Office affected by this change |
| See a flow chart of the process Office takes khổng lồ determine whether khổng lồ run macros in a file | How Office determines whether to lớn run macros in files from the internet |
| Identify files with VBA macros that might be blocked using the Readiness Toolkit | Use the Readiness Toolkit to identify files with VBA macros that might be blocked |
| Learn about policies that you can use to lớn control VBA macro execution | Use policies lớn manage how Office handles macros |
Steps to take to lớn allow VBA macros lớn run in files that you trust
How you allow VBA macros lớn run in files that you trust depends on where those files are located or the type of tệp tin.
The following table danh sách different common scenartiện ích ios and possible approaches to lớn take lớn unbloông xã VBA macros and allow them khổng lồ run. You don"t have sầu lớn bởi vì all possible approaches for a given scenario. In the cases where we have sầu listed multiple approaches, pick the one that best suits your organization.
| Individual files | • Select the Unblock checkbox on the General tab of the Properties dialog for the file • Use the Unblock-File cmdlet in PowerShell For more information, see Remove Mark of the Web from a tệp tin. |
| Files centrally located on a network giới thiệu or trusted website | Unblochồng the file using an approach listed under "Individual files." If there isn"t an Unblock checkbox & you want khổng lồ trust all files in that network location: • Designate the location as a Trusted site • Add the location to lớn the Local intranet zone For more information, see Files centrally located on a network giới thiệu or trusted trang web. |
| Files stored on OneDrive sầu or SharePoint, including a site used by a Teams channel | • Have users directly open the file by using the xuất hiện in Desktop App option • If users download the file locally before opening it, remove sầu Mark of the Web from the local copy of the tệp tin (see the approaches under "Individual files")• Designate the location as a Trusted site For more information, see Files on OneDrive or SharePoint. |
| Macro-enabled template files for Word, PowerPoint, and Excel | If the template file is stored on the user"s device: • Remove sầu Mark of the Web from the template tệp tin (see the approaches under "Individual files") • Save sầu the template file khổng lồ a Trusted Location If the template tệp tin is stored on a network location: • Use a digital signature và trust the publisher • Trust the template file (see the approaches under "Files centrally located on a network nội dung or trusted website") For more information, see Macro-enabled template files for Word, PowerPoint, and Excel. |
| Macro-enabled add-in files for PowerPoint | • Remove Mark of the Web from the Add-in file • Use a digital signature & trust the publisher • Save the Add-in tệp tin to a Trusted Location For more information, see Macro-enabled add-in files for PowerPoint & Excel. |
| Macro-enabled add-in files for Excel | • Remove sầu Mark of the Web from the Add-in tệp tin • Save the Add-in file khổng lồ a Trusted Location For more information, see Macro-enabled add-in files for PowerPoint & Excel. |
| Groups of files saved to folders on the user’s device | Designate the thư mục a Trusted Location For more information, see Trusted Locations. |
Versions of Office affected by this change
This change only affects Office on devices running Windows and only affects the following applications: Access, Excel, PowerPoint, Visio, và Word.
The change began rolling out in Version 2203, starting with Current Channel (Preview) in early April 2022. Later, the change will be available in the other update channels, such as Monthly Enterprise Channel and Semi-Annual Enterprise Channel.
The following table shows the forecasted schedule of when this change will be available in each update channel. Information in italics is subject to change.
| Current Channel (Preview) | Version 2203 | Started rolling out on April 12, 2022 |
| Current Channel | Version 2206 | Begin rolling out on July 27, 2022 |
| Monthly Enterprise Channel | To be determined | To be determined |
| Semi-Annual Enterprise Channel (Preview) | To be determined | To be determined |
| Semi-Annual Enterprise Channel | To be determined | To be determined |
Note
As we roll out this change khổng lồ Current Channel over the next few weeks, not all customers will see the change right away.
The change doesn’t affect Office on a Mac, Office on Android or iOS devices, or Office on the website.
How Office determines whether khổng lồ run macros in files from the internet
The following flowchart graphic shows how Office determines whether lớn run macros in a tệp tin from the mạng internet.
The following steps explain the information in the flowchart graphic, except for Excel Add-in files. For more information about those files, see Macro-enabled add-in files for PowerPoint & Excel. Also, if a file is located on a network mô tả that isn’t in the Local intranet zone or isn’t a trusted site, macros will be blocked in that tệp tin.
A user opens an Office file containing macros obtained from the mạng internet. For example, an tin nhắn attachment. The tệp tin has Mark of the Web (MOTW).Note
Mark of the Web only applies khổng lồ files saved on an NTFS file system, not files saved lớn FAT32 formatted devices.If the file is from a Trusted Location, the file is opened with the macros enabled. If the file isn"t from a Trusted Location, the evaluation continues.
If the macros are digitally signed & the matching Trusted quảng cáo online certificate is installed on the device, the file is opened with the macros enabled. If not, then the evaluation continues.
Policies are checked to lớn see if macros are allowed or blocked. If the policies are set to lớn Not Configured, the evaluation continues lớn Step 6.
(a) If macros are blocked by policy, the macros are blocked. (b) If the macros are enabled by policy, the macros are enabled.
If the user had previously opened the file, before this change in mặc định behavior, and had selected Enable content from the Trust Bar, then the macros are enabled because the file is considered trusted.
Note
For perpetual versions of Office, such as Office LTSC 2021 or Office 2019, this step occurs after Step 3 & before Step 4, and isn’t affected by the change coming khổng lồ Current Channel.This step is where the change lớn the mặc định behavior of Office takes effect. With this change, macros in files from the mạng internet are blocked & users will see the Security Risk banner when they open the tệp tin.
Note
Previously, before this change in default behavior, the ứng dụng would kiểm tra to lớn see if the VBA Macro Notification Settings policy was enabled & how it was configured.
If the policy was phối to Disabled or Not Configured, then the phầm mềm would check the settings under File > Options > Trust Center > Trust Center Settings... > Macro Settings. The mặc định is phối to lớn "Disable all macros with notification," which allows users to enable content in the Trust Bar.
Guidance on allowing VBA macros to run in files you trust
Remove Mark of the Web from a file
For an individual tệp tin, such as a tệp tin downloaded from an internet location or an email attachment the user has saved to lớn their local device, the simplest way to unblock macros is to lớn remove Mark of the Web. To remove sầu, right-click on the tệp tin, choose Properties, và then select the Unblock checkbox on the General tab.
You can also use the Unblock-File cmdlet in PowerShell to remove sầu the ZoneId value from the file. Removing the ZoneId value will allow VBA macros to lớn run by default. Using the cmdlet does the same thing as selecting the Unblock checkbox on the General tab of the Properties dialog for the file. For more information about the ZoneId value, see Mark of the Web và zones.
Files centrally located on a network chia sẻ or trusted website
If you have sầu your users access files from a trusted website or an internal file VPS, you can vì either of the following steps so that macros from those locations won"t be blocked.
Designate the location as a Trusted siteIf the network location is on the intranet, add the location khổng lồ the Local intranet zoneNote
If you add something as a trusted site, you’re also giving the entire site elevated permissions for scenarios not related to lớn Office.For the Local intranet zone approach, we recommover you save sầu the files khổng lồ a location that’s already considered part of the Local intranet zone, instead of adding new locations to lớn that zone.In general, we recommkết thúc that you use trusted sites, because they have some additional security compared to lớn the Local intranet zone.For example, if users are accessing a network nội dung by using its IPhường address, macros in those files will be blocked unless the file mô tả is in the Trusted sites or the Local intranet zone.
Tip
To see a danh mục of trusted sites or what"s in the Local intranet zone, go khổng lồ Control Panel > Internet Options > Change security settings on a Windows device.For example, you could add a tệp tin hệ thống or network giới thiệu as a trusted site, by adding its FQDoanh Nghiệp or IPhường address to lớn the list of trusted sites.
If you want to add URLs that begin with http:// or network shares, clear the Require VPS verification (https:) for all sites in this zone checkbox.
Important
Because macros aren’t blocked in files from these locations, you should manage these locations carefully. Be sure you control who is allowed to save sầu files lớn these locations.
You can use Group Policy và the "Site khổng lồ Zone Assignment List" policy to add locations as trusted sites or khổng lồ the Local intranet zone for Windows devices in your organization. This policy is found under Windows ComponentsInternet ExplorerInternet Control PanelSecurity Page in the Group Policy Management Console. It’s available under both Computer ConfigurationPoliciesAdministrative sầu Templates & User ConfigurationPoliciesAdministrative Templates.
Files on OneDrive or SharePoint
If a user downloads a file on OneDrive or SharePoint by using a website browser, the configuration of the Windows mạng internet security zone (Control Panel > Internet Options > Security) will determine whether the browser sets Mark of the Web. For example, alokapidakaldim.com Edge sets Mark of the Web on a tệp tin if it"s determined to lớn be from the Internet zone.
If a user selects mở cửa in Desktop App in a tệp tin opened from the OneDrive sầu trang web or from a SharePoint site (including a site used by a Teams channel), then the file won"t have sầu Mark of the Web.
If a user has the OneDrive sầu sync client running và the sync client downloads a file, then the file won"t have sầu Mark of the Web.
Files that are in Windows known folders (Desktop, Documents, Pictures, Screenshots, & Camera Roll), and are synced to OneDrive, don"t have Mark of the Web.
If you have sầu a group of users, such as the Finance department, that need to lớn use files from OneDrive sầu or SharePoint without macros being blocked, here are some possible options:
Have them open the file by using the mở cửa in Desktop App option
Set the Windows mạng internet security zone assignment for OneDrive or SharePoint domains khổng lồ Trusted Sites. Admins can use the "Site lớn Zone Assignment List" policy và configure the policy to place https://your-domain-name.sharepoint.com (for SharePoint) or https://your-domain-name-my.sharepoint.com (for OneDrive) into lớn the Trusted Sites zone.
This policy is found under Windows ComponentsInternet ExplorerInternet Control PanelSecurity Page in the Group Policy Management Console. It’s available under both Computer ConfigurationPoliciesAdministrative Templates and User ConfigurationPoliciesAdministrative Templates.
SharePoint permissions and OneDrive sharing aren"t changed by adding these locations to Trusted Sites. Maintaining access control is important. Anyone with permissions khổng lồ add files lớn SharePoint could add files with active content, such as macros. Users who tải về files from domains in the Trusted Sites zone will bypass the mặc định khổng lồ blochồng macros.
Macro-enabled template files for Word, PowerPoint, và Excel
Macro-enabled template files for Word, PowerPoint, và Excel that are downloaded from the internet will have Mark of the Web. For example, template files with the following extensions:
.dot.dotm.pot.potm.xlt.xltmWhen the user opens the macro-enabled template file, the user will be blocked from running the macros in the template file. If the user trusts the source of the template tệp tin, they can remove sầu Mark of the Web from the template tệp tin, & then reopen the template file in the Office tiện ích.
Xem thêm: Btw, Faq, Fyi, Imho Là Gì ? Imho Có Nghĩa Là Gì? Btw, Faq, Fyi, Imho Là Gì
If you have a group of users that need to lớn use macro-enabled templates without macros being blocked, you can take either of the following actions:
Use a digital signature và trust the publisher.Macro-enabled add-in files for PowerPoint and Excel
Macro-enabled Add-in files for PowerPoint & Excel that are downloaded from the mạng internet will have sầu Mark of the Web. For example, Add-in files with the following extensions:
.ppage authority.ppam.xla.xlamWhen the user tries khổng lồ install the macro-enabled Add-in, by using File > Options > Add-ins or by using the Developer ribbon, the Add-in will be loaded in a disabled state & the user will be blocked from using the Add-in. If the user trusts the source of the Add-in tệp tin, they can remove Mark of the Web from the Add-in tệp tin, and then reopen PowerPoint or Excel to use the Add-in.
If you have sầu a group of users that need lớn use macro-enabled Add-in files without macros being blocked, you can take the following actions.
For PowerPoint Add-in files:
Remove sầu Mark of the Web from the .ppa or .ppam file.Use a digital signature and trust the publisher.For Excel Add-in files:
Remove sầu Mark of the Web from the .xla or .xlam tệp tin.Note
Using a digital signature and trusting the publisher doesn"t work for Excel Add-in files that have Mark of the Web. This behavior isn"t new for Excel Add-in files that have sầu Mark of the Web. It"s worked this way since năm 2016, as a result of a previous security hardening effort (related lớn alokapidakaldim.com Security Bulletin MS16-088).
Trusted Locations
Saving files from the internet lớn a Trusted Location on a user"s device ignores the check for Mark of the Web and opens with VBA macros enabled. For example, a line of business application could send reports with macros on a recurring basis. If files with macros are saved khổng lồ a Trusted Location, users won"t need lớn go to lớn the Properties for the tệp tin, và select Unblock to lớn allow the macros to run.
Because macros aren’t blocked in files saved to a Trusted Location, you should manage Trusted Locations carefully và use them sparingly. Network locations can also be set as a Trusted Location, but it"s not recommended. For more information, see Trusted Locations for Office files.
Additional information about Mark of the Web
Mark of the Web and Trusted Documents
When a file is downloaded khổng lồ a device running Windows, Mark of the Web is added to lớn the file, identifying its source as being from the mạng internet. Currently, when a user opens a tệp tin with Mark of the Web, a SECURITY WARNING banner appears, with an Enable content button. If the user selects Enable content, the file is considered a Trusted Document, và macros are allowed khổng lồ run. The macros will continue to lớn run even after the change of default behavior khổng lồ bloông xã macros in files from the mạng internet is implemented, because the tệp tin is still considered a Trusted Document.
After the change of default behavior to bloông chồng macros in files from the mạng internet, users will see a different banner the first time they open a tệp tin with macros from the internet. This SECURITY RISK banner doesn"t have the option lớn Enable content. But users will be able lớn go lớn the Properties dialog for the tệp tin, and select Unblock, which will remove sầu Mark of the Web from the tệp tin and allow the macros to run, as long as no policy or Trust Center setting is blocking.
Mark of the Web and zones
By mặc định, Mark of the Web is added to files only from the Internet or Restricted sites zones.
Tip
To see these zones on a Windows device, go lớn Control Panel > Internet Options > Change security settings.
You can view the ZoneId value for a tệp tin by running the following command at a command prompt, & replacing name of file with your file name.
notepad name of file:Zone.IdentifierWhen you run this comm&, Notepad will open và display the ZoneId under the
Here"s a danh mục of ZoneId values và what zone they map to.
0 = My Computer1 = Local intranet2 = Trusted sites3 = Internet4 = Restricted sitesFor example, if the ZoneId is 2, VBA macros in that tệp tin won"t be blocked by mặc định. But if the ZoneId is 3, macros in that file will be blocked by default.
You can use the Unblock-File cmdlet in PowerShell to remove the ZoneId value from the file. Removing the ZoneId value will allow VBA macros khổng lồ run by default. Using the cmdlet does the same thing as selecting the Unblock checkbox on the General tab of the Properties dialog for the tệp tin.
Use the Readiness Toolkit khổng lồ identify files with VBA macros that might be blocked
To identify files that have VBA macros that might be blocked from running, you can use the Readiness Toolkit for Office add-ins và VBA, which is a không tính phí tải về from alokapidakaldim.com.
The Readiness Toolkit includes a standalone executable that can be run from a comm& line or from within a script. You can run the Readiness Toolkit on a user"s device lớn look at files on the user"s device. Or you can run it from your device khổng lồ look at files on a network chia sẻ.
When you run the standalone executable version of the Readiness Toolkit, a JSON tệp tin is created with the information collected. You"ll want lớn save sầu the JSON files in a central location, such as a network nói qua. Then you"ll run the Readiness Report Creator, which is a UI wizard version of the Readiness Toolkit. This wizard will consolidate the information in the separate JSON files into a single report in the size of an Excel tệp tin.
To identify files that might be impacted by using the Readiness Toolkit, follow these basic steps:
Install the Readiness Toolkit.
From a commvà prompt, go to lớn the thư mục where you installed the Readiness Toolkit and run the ReadinessReportCreator.exe pháo commvà with the blockinternetscan option.
For example, if you want lớn scan files in the c:officefiles folder (& all its subfolders) on a device và save sầu the JSON tệp tin with the results lớn the Finance share on Server01, you can run the following commvà.
ReadinessReportCreator.exe pháo -blockinternetscan -p c:officefiles -r -output \server01finance -silentAfter you"ve sầu done all your scans, run the Readiness Report Creator.On the Create a readiness report page, select Previous readiness results saved together in a local thư mục or network share, & then specify the location where you saved all the files for the scans.On the Report settings page, select Excel report, & then specify a location to save the report.When you open the report in Excel, go khổng lồ the VBA Results worksheet.In the Guideline column, look for Blocked VBA file from Internet.For more detailed information about using the Readiness Toolkit, see Use the Readiness Toolkit lớn assess application compatibility for alokapidakaldim.com 365 Apps.
Use policies to lớn manage how Office handles macros
You can use policies lớn manage how Office handles macros. We recommover that you use the Blochồng macros from running in Office files from the Internet policy. But if that policy isn"t appropriate for your organization, the other option is the VBA Macro Notification Settings policy.
For more information on how khổng lồ deploy these policies, see Tools available to lớn manage policies.
Important
You can only use policies if you"re using alokapidakaldim.com 365 Apps for enterprise. Policies aren"t available for alokapidakaldim.com 365 Apps for business.
Blochồng macros from running in Office files from the Internet
This policy prevents users from inadvertently opening files containing macros from the mạng internet. When a file is downloaded to a device running Windows, or opened from a network chia sẻ location, Mark of the Web is added khổng lồ the tệp tin identifying it was sourced from the internet.
We recommend enabling this policy as part of the security baseline for alokapidakaldim.com 365 Apps for enterprise. You should enable this policy for most users & only make exceptions for certain users as needed.
There"s a separate policy for each of the five sầu applications. The following table shows where each policy can be found in the Group Policy Management Console under User ConfigurationPoliciesAdministrative sầu Templates:
| Access | alokapidakaldim.com Access 2016Application SettingsSecurityTrust Center |
| Excel | alokapidakaldim.com Excel 2016Excel OptionsSecurityTrust Center |
| PowerPoint | alokapidakaldim.com PowerPoint 2016PowerPoint OptionsSecurityTrust Center |
| Visio | alokapidakaldim.com Visio 2016Visio OptionsSecurityTrust Center |
| Word | alokapidakaldim.com Word 2016Word OptionsSecurityTrust Center |
Which state you choose for the policy determines the cấp độ of protection you"re providing. The following table shows the current cấp độ of protection you get with each state, before the change in mặc định behavior is implemented.
| Protected | Enabled | Users will be blocked from running macros in files obtained from the mạng internet. Part of the alokapidakaldim.com recommended security baseline. | |
| Not protected | Disabled | Will respect the settings configured under File > Options > Trust Center > Trust Center Settings... > Macro Settings. | |
| Not protected | Not Configured | Will respect the settings configured under File > Options > Trust Center > Trust Center Settings... > Macro Settings. |
Note
If you set this policy khổng lồ Disabled, users will see, by mặc định, a security warning when they open a tệp tin with a macro. That warning will let users know that macros have sầu been disabled, but will allow them khổng lồ run the macros by choosing the Enable content button.This warning is the same warning users have been shown previously, prior khổng lồ this recent change we’re implementing to lớn bloông xã macros.We don’t recommkết thúc setting this policy to lớn Disabled permanently. But in some cases, it might be practical khổng lồ bởi so temporarily as you kiểm tra out how the new macro blocking behavior affects your organization and as you develop a solution for allowing safe usage of macros.After we implement the change khổng lồ the default behavior, the màn chơi of protection changes when the policy is mix to Not Configured.
| Protected | Not Configured | Users will be blocked from running macros in files obtained from the internet. Users will see the Security Risk banner with a Learn More button |
VBA Macro Notification Settings
If you don"t use the "Blochồng macros from running in Office files from the Internet" policy, you can use the "VBA Macro Notification Settings" policy to lớn manage how macros are handled by Office.
This policy prevents users from being lured into lớn enabling malicious macros. By mặc định, Office is configured lớn bloông xã files that contain VBA macros and display a Trust Bar with a warning that macros are present và have sầu been disabled. Users can inspect and edit the files if appropriate, but can’t use any disabled functionality until they select Enable Content on the Trust Bar. If the user selects Enable Content, then the file is added as a Trusted Document and macros are allowed to run.
There"s a separate policy for each of the five applications. The following table shows where each policy can be found in the Group Policy Management Console under User ConfigurationPoliciesAdministrative sầu Templates:
| Access | alokapidakaldim.com Access 2016Application SettingsSecurityTrust Center |
| Excel <1> | alokapidakaldim.com Excel 2016Excel OptionsSecurityTrust Center |
| PowerPoint | alokapidakaldim.com PowerPoint 2016PowerPoint OptionsSecurityTrust Center |
| Visio | alokapidakaldim.com Visio 2016Visio OptionsSecurityTrust Center |
| Word | alokapidakaldim.com Word 2016Word OptionsSecurityTrust Center |
Note
<1> For Excel, the policy is named Macro Notification Settings.The "VBA Macro Notification Settings" policy is also available for Project và Publisher.Which state you choose for the policy determines the level of protection you"re providing. The following table shows the màn chơi of protection you get with each state.
| Protected | Enabled | Disable all except digitally signed macros (and select "Require macros khổng lồ be signed by a trusted publisher") | |
| Protected | Enabled | Disable all without notification | |
| Partially protected | Enabled | Disable all with notification | |
| Partially protected | Disabled | (Same behavior as "Disable all with notification") | |
| Not protected | Enabled | Enable all macros (not recommended) |
Important
Securing macros is important. For users that don"t need macros, turn off all macros by choosing "Disable all without notification."
Our security baseline recommendation is that you should do the following:
Enable the "VBA Macro Notification Settings" policy.For users that need macros, choose "Disable all except digitally signed macros" và then select "Require macros lớn be signed by a trusted publisher." The certificate needs khổng lồ be installed as a Trusted Advertiser on users" devices.If you don"t configure the policy, users can configure macro protection settings under File > Options > Trust Center > Trust Center Settings... > Macro Settings.
The following table shows the choices users can make under Macro Settings and the level of protection each setting provides.
| Protected | Disable all macros except digitally signed macros | |
| Protected | Disable all macros without notification | |
| Partially protected | Disable all macros with notification (default) | |
| Not protected | Enable all macros (not recommended; potentially dangerous code can run) |
Note
In the policy setting values and the sản phẩm UI for Excel, the word "all" is replaced by "VBA." For example, "Disable VBA macros without notification."
Tools available to manage policies
There are several tools available lớn you khổng lồ configure and deploy policy settings lớn users in your organization.
Cloud Policy
You can use Cloud Policy lớn configure and deploy policy settings lớn devices in your organization, even if the device isn"t domain joined. Cloud Policy is a web-based tool và is found in the alokapidakaldim.com 365 Apps admin center.
In Cloud Policy, you create a policy configuration, assign it to lớn a group, và then select policies to lớn be included in the policy configuration. To select a policy to include, you can tìm kiếm by the name of the policy. Cloud Policy also shows which policies are part of the alokapidakaldim.com recommended security baseline. The policies available in Cloud Policy are the same User Configuration policies that are available in the Group Policy Management Console.
For more information, see Overview of Cloud Policy service for alokapidakaldim.com 365.
alokapidakaldim.com Endpoint Manager admin center
In the alokapidakaldim.com Endpoint Manager admin center, you can use either the Settings catalog (preview) or Administrative Templates to lớn configure & deploy policy settings to lớn your users for devices running Windows 10 or later.
To get started, go to lớn Devices > Configuration profiles > Create profile. For Platform, choose Windows 10 & later and then choose the profile type.
Xem thêm: Download Adobe Photoshop Cs5 Portable Full Chạy Ngay Không Cần Cài Đặt
For more information, see the following articles:
Group Policy Management Console
If you have Windows Server & Active Directory Domain Services (AD DS) deployed in your organization, you can configure policies by using Group Policy. To use Group Policy, tải về the most current Administrative Template files (ADMX/ADML) for Office, which include the policy settings for alokapidakaldim.com 365 Apps for enterprise. After you copy the Administrative sầu Template files lớn AD DS, you can use the Group Policy Management Console khổng lồ create Group Policy Objects (GPOs) that include policy settings for your users, and for domain joined devices.
