Access 2003 (MSO Version 11) Runtime
Version 5.4 series has been enhanced to work better on Microsoft SQL Server and works better on Microsoft XP and Office XP Platform. If you do not have Microsoft Office 2003, you can download Microsoft Access Runtime 2003.
Download
Please contact me if you have difficulty accessing any of the files listed here.
Q: Whenever I open MS Access 2003 application, it display the following message - "This file may not be safe if it contains code that was intended to harm your computer. Do you want to open this file or cancel operation?"
A: The macro security level on the computer has been set to Medium, and MS Access cannot verify that you received this file from a trusted source, nor can it verify that the version you are opening has not been tampered with by an unauthorized user. If this message appears when you open a database that you created, it implies that the file could have been modified by someone without your knowledge since you last worked on it. If you create databases, you ensure this by signing the macros and VBA code in your databases before distributing them to your users, and also ask your users to add you as a trusted source. When you open a file signed by a trusted source, such as an individual or corporation, it will open without any security warnings. For more information about digital signatures and trusted sources, see Signing a VBA project for more information. To remove this security warning (not recommended)... On the Security Level tab in the Security dialog box (Tools menu > Macro submenu). Set it to low.
If you have only Access 2003 Runtime install, you may not have the ability to perform the above procedure. So what can you do? Read on...
To digitally sign VBA projects in your solution, you must first obtain a digital certificate for software publishing. There are three ways of getting a digital certificate:
- Create a digital certificate for your own use. Such a certificate would only be used to sign macros for your own use or for sharing within a small workgroup.
- Obtain a digital certificate from your organization's internal certification authority. Some organizations and corporations may choose to have a security administrator or group act as its own certification authority and produce or distribute digital certificates by using tools such as Microsoft Certificate Server. Microsoft Certificate Server can function as a stand-alone certificate authority or as part of an existing certificate authority hierarchy.
- Obtain a digital certificate from a commercial certification authority such as VeriSign, Inc.
Creating Your Own Digital Certificate
When the security level is set to High in your Office application, only signed macros from trusted sources can be run; the macros in all other documents are disabled. If you want to use the High security setting for macros you write yourself, you either need to obtain a certificate from a certification authority as described later in this section, or create a digital certificate for your own use.
To create a digital certificate for your own use, you run the Create Digital Certificate utility (Selfcert.exe) and enter information about yourself that will be stored in the certificate. Because a digital certificate created in this fashion isn't issued by a formal certification authority, a digital certificate created this way is called a self-signed certificate and VBA projects signed by using such a certificate are referred to as self-signed projects. Depending on how Office 2000 digital-signature features are being used in your organization, you may be prevented from using such a certificate, or other users may not be able to trust macros in self-signed projects.
Before you can create a self-signed certificate, you must install the Create Digital Certificate utility (Selfcert.exe), which isn't installed if you select Typical during the Office installation.
To install the Create Digital Certificate utility
- In the Control Panel, double-click Add/Remove Programs.
- On the Install/Uninstall tab, click Microsoft Office, and then click Add/Remove.
- In the Microsoft Office Maintenance Mode dialog box, click the Add or Remove Features button.
- Expand Office Tools and set Digital Signature for VBA Projects to Run from My Computer.
- Click Update Now.
Selfcert.exe will be installed in the same folder as the Office applications, which by default is the C:\Program Files\Microsoft Office\Office folder.
To create a self-signed digital certificate
Run Selfcert.exe from My Computer or Windows Explorer. In the Your name box, type your name and any other identifying information you want associated with this certificate, and then click OK. Selfcert.exe will create and install a self-signed certificate that you can use to sign VBA projects on the current computer. To create a self-signed certificate to use on another computer, run Selfcert.exe again on that computer.
Important In most cases, a self-signed certificate created with Selfcert.exe should be used only for personal use or for testing purposes. To use Microsoft Office macro-virus protection features in the most secure fashion possible, you and your organization should sign VBA projects only with certificates issued by a certification authority. If you sign a VBA project by using a self-signed certificate, if security is set to Medium or High, the first time you open the document containing the signed VBA project, the Security Warning dialog box is displayed, indicating that the certificate used to sign the VBA project hasn't been issued by a certification authority and shouldn't be trusted. Obviously, you can safely trust a VBA project you have signed yourself by using a self-signed certificate, and if you do so the Security Warning dialog box won't be displayed the next time you open the document. However, as a general security policy an organization should either lock the trusted sources list to prevent users from trusting any certificates other than those provided by administrators or should strongly discourage users from trusting VBA projects signed with self-signed certificates.
Signing Your VBA Project
Once you have your digital certificate installed, you can sign the VBA projects associated with Word, Excel, and PowerPoint documents, templates, and add-ins. For Outlook, you can sign the VBA project that is associated with the installation of Outlook on a particular computer, or if user profiles are in use, for a particular user on that computer. You should do this only after your solution has been tested and is ready for deployment, because any time code in a signed VBA project is modified in any way, its digital signature is removed. However, modifying the contents of the document other than the VBA code won't invalidate the signature on a VBA project contained within the document. This is because only the VBA project is signed, not the entire document. If you want to prevent users of your solution from accidentally modifying your VBA code and invalidating your signature, lock the VBA project before signing it. For information about how to lock a VBA project, see "Locking Your Solution's VBA Project" earlier in this chapter.
Note Locking your VBA project doesn't prevent another user from replacing the digital signature with another signature. This is allowed so that a system administrator or end user can replace a current signature with an approved signature or re-sign a document after a previous signature expires.
Similarly, if you produce an add-in that adds code to a document's VBA project, your code should determine if the project is digitally signed and notify the user of the consequences of modifying a signed project before continuing. For more information, see "Using Code and Objects in a Signed VBA Project from Automation" later in this chapter.
Important You can't sign VBA projects in Excel workbooks that contain Excel 4.0 macro sheets (XLM). If you try to sign a workbook that contains XLM macros, an error message is displayed. You must remove all XLM macros before you can sign the workbook.
To digitally sign a VBA project
Open the document or template that contains the VBA project you want to sign. For Outlook, open Outlook on the computer that contains the VBA project you want to sign. If user profiles are in use, log on as the user whose Outlook VBA project you want to sign.
- Open the Visual Basic Editor.
- In the Project Explorer, select the project you want to sign.
- On the Tools menu, click Digital Signatures.
- Do one of the following:
- If you haven't previously selected a digital certificate, or want to use another one, click Choose, select the certificate, and click OK twice.
- Click OK to use the current certificate.
Note If a VBA project has been signed previously, clicking Choose and selecting a new digital certificate replaces the previous signature. To remove a signature from a previously signed project, click Remove.
|