Allowing Excel Macros in the LIC lab

There is a need for instructor to use Excel macros for one course in the LIC lab.  Normally macros are blocked in all Office apps, here's how to allow Excel macros in the LIC lab.

Step-by-step guide

Assumptions:

• You have an "_admin" account and are using it to launch the Group Policy Management console.
• The AD Security Group "LIC_108" contains the computers in the LIC lab.
• You know the name of the Podium computer in the LIC lab

1. Launch the Group Policy Management console with your '_admin" account
2. Go to the OU royalroads.ca\RRU\Students\StudentComputers\LICLab, right-click and "Link an Existing GPO..." and link the GP "Office 2016 Settings WithExcelMACROS"
3. Go to royalroads.ca\Group Policy Objects and select "Office 2016 Settings"
4. On the right, open the Delegation tab and hit the Add... button
5. Add the security group LIC_108 with read permissions.
6. Add hit the Add... button again and add the Podium computer with read permissions. (Do this separate from LIC_108)
7. Hit the Advanced... button in the lower right
8. Deny read permissions to both the LIC_108 and the Podium computer and hit OK.
9. Go to royalroads.ca\RRU\Computers\Projectors\CESIP GP. Right-click and "Link an Existing GPO..." and link the GP "Office 2016 Settings WithExcelMACROS"
10. Make sure the "Office 2016 Settings WithExcelMACROS" is LOWER in the list of Linked Group Policy Objects for \RRU\Computers\Projectors\CESIP GP (higher "Link Order" number) than "Office 2016 Settings" (this causes the regular settings to over-write the 'allow-macro' settings on the podiums that have permissions to read "Office 2016 Settings"
11. Update Group Policies on the lab computers and that podium and reboot, then test. (Remote Connection - CMD as Admin - "GPupdate /force"

To undo after that course:

1. Go to royalroads.ca\Group Policy Objects and select "Office 2016 Settings"
2. On the right, open the Delegation tab and Right-click on LIC_108 and select Remove then do the same for the podium computer.
3. Go to royalroads.ca\Group Policy Objects and select "Office 2016 Settings WithExcelMACROS" select the Scope tab on the right and right-click and Delete Links to LICLab and CESIP GP