The levels of security to help reduce macro virus infection are as follow:
- Very High This setting is not available in the Security dialog box in Microsoft Office Access 2003. It is possible, however, to use system policies to set the security level in Access to Very High. When the security level is set to Very High, Access cannot open any Access database or Access project files.
- High You can open files that have been digitally signed and that you confirm are from a trusted source Before deciding to trust a source, you should confirm that the source is responsible and uses a virus scanner before signing macros.
- Medium A warning is displayed whenever a file is opened from a source that is not on your list of trusted sources (described below). You can choose whether to open the database.
- Low If you are sure that all the files and add-ins you open are safe, you can select this option. At this security level, macros are always enabled when you open files.
By default, the security level is set to Medium. If the security level is set to Medium or High, you can maintain a list of trusted macro sources. When you open a file or load an add-in that contains macros developed by any of these sources, the macros are automatically enabled.
A digital signature on a macro is like a wax seal on an envelope
When you open a file or load an add-in that contains a digitally signed macro, the digital signature appears on your computer as a certificate. The certificate names the source of the macro and provides additional information about the identity and integrity of that source. A digital signature does not necessarily guarantee the safety of a macro, so you must decide whether you trust a macro that has been digitally signed. For example, you might trust macros signed by someone you know or by a well-established company. If you are unsure about a file or an add-in that contains digitally signed macros, carefully examine the certificate before you open the file. If you know that you can always trust macros from a particular publisher or developer, you can add that publisher or developer to the list of trusted sources when you open the file or load the add-in.
You can digitally sign macros from within the Visual Basic Editor.
When you open a file that includes signed macros, you are prompted whether you want to trust all macros originating from that publisher. If you select this option, you add the certificate's owner to your list of trusted publishers. Before you decide to do this, you should review the details of the digital certificate
Once you add a person (or corporation) to your list of trusted publishers, Office will enable macros signed by this trusted publisher without showing you a security warning. You can also remove entries from the list of trusted publishers.
Note A source added to the list of trusted publishers will also be trusted in Microsoft Internet Explorer.
Notes about the security warning
- The database might not be from a trusted source. If the security level is set to Medium or High, and you open a database that contains digitally signed macros that are not from a trusted source, you receive a security warning. If you are sure you trust the macro developer, add the name to the list of trusted publishers on the Trusted Publishers tab in the Security dialog box (on the Tools menu, point to Macro, and click Security).
- The database might contain a macro virus. If you don't expect the database to contain a macro, Visual Basic for Applications (VBA) code, a form that contains an ActiveX control, a report that contains an ActiveX control, action query, data-definition query, pass-through query, or update query, you might have a virus that is adding a macro virus to the database. Check your computer for viruses, and try to get an uninfected copy of the database from the source.
- The database contains legitimate macros, Visual Basic for Applications (VBA) code, forms that contain an ActiveX control, reports that contain an ActiveX control, action queries, data-definition queries, pass-through queries, or update queries. If you know these are legitimate and safe, you might want to digitally sign the database and then add your name to the list of trusted publishers on the Trusted Publishers tab in the Security dialog box (on the Tools menu, point to Macro, and click Security).
Preventing macro security warnings
When the Security Warning dialog box tells you the source has not been authenticated