none
Trust Center

    Question

  • I've created a little app that I'll be sending to individuals with the ACCESS 2010 runtime only.  The app has a custom Ribbon and the Shift Key Disabled.   I have someone testing it at the moment and can't get past all the Trust Center...stuff.  How do you turn all that...Stuff...off?  I'm distributing this to people on my own network.

    Thanks

    Wednesday, December 01, 2010 7:30 PM

Answers

  • KillingComputers wrote:

    I've created a little app that I'll be sending to individuals with the ACCESS 2010 runtime only.  The app has a custom Ribbon and the Shift Key Disabled.   I have someone testing it at the moment and can't get past all the Trust Center...stuff.  How do you turn all that...Stuff...off?  I'm distributing this to people on my own network.

    An alternative is to use the Auto FE Updater at www.autofeupdater.com to
    set the trust center, automatically copy down the new FEs when they are
    available and much more.

    Tony


    Tony Toews, Microsoft Access MVP
    Tony's Main MS Access pages - http://www.granite.ab.ca/accsmstr.htm
    Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/
    For a convenient utility to keep your users FEs and other files   updated see http://www.autofeupdater.com/

    Friday, December 03, 2010 8:47 PM

All replies

  • ...or at the very minimum set it in a module.

    Wednesday, December 01, 2010 7:35 PM
  • Sorry, but you can't.

    You'll have to ensure that the application is placed in a trusted location before you can have any code run. What Jeff Conrad has at http://accessjunkie.com/faq_33.aspx might work with Access 2010 as well (although you may have to use HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Access\Security\Trusted Locations instead of HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Access\Security\Trusted Locations)


    Doug Steele, Microsoft Access MVP
    http://www.AccessMVP.com/djsteele (no e-mails, please!)
    Wednesday, December 01, 2010 7:53 PM
  • So how do you distribute a runtime version now?  You can't enable or disable this stuff in a module at start-up?  This takes Job Security to a whole new level.
    Wednesday, December 01, 2010 7:59 PM
  • No, you can't enable it at start-up because no code will run unless the application is in a trusted location. However, if you read Jeff's tip, you'll see it's only a registry entry that needs to be set.


    Doug Steele, Microsoft Access MVP
    http://www.AccessMVP.com/djsteele (no e-mails, please!)
    Wednesday, December 01, 2010 8:05 PM
  • Right, that means that I'm joined at the hip to my App.  This really bytes.
    Wednesday, December 01, 2010 8:07 PM
  • Hello KillingComputers,

     

    Normally, if you were to use the Package Wizard to create an installation package then a trusted location will be created for you automatically and no further steps would be required.  Currently, there is an issue with this in the packaging wizard where this process is not working as expected and that is being looked into.  To work around this problem, you can still use the packaging wizard and then add the registry key for the trusted location within the add registry keys section.  The key you would need to add would be the ones referenced in the link Doug provided earlier in this thread and instead of 12.0, you would need to update it to 14.0.  The other option to the packaging wizard is also mentioned on the link provided earlier, which is to a script or install routine that creates these same keys for you.

     

    Ex:

    Registry Key:

    HKEY_CURRENT_USER/Software/Microsoft/Office/14.0/Access/Security/Trusted Locations/Location1

     

    +>Add a String Value (REG_SZ) called Path and the value of this would be the path to your database.

    +>If you want to trust subfolders of the  path above, then you would need to add a Reg_DWORD called AllowSubFolders and give it a value of 1.

     

    Note:  You will notice this key and values referenced on the screenshot in the link Doug gave you.

     

     

    In Access 2010, the Package Wizard is included with the Access installation media, but not installed by default.  You can enable it by running Office 2010 setup and selecting Microsoft Office | Microsoft Access | Add-ins | Package Wizard and setting it to "Run from my computer".  It should then appear on under File | Save & Publish | Package and Distribute.

     

     

    Best Regards,

    Nathan Ost

    Microsoft Online Community Support


    Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Friday, December 03, 2010 7:53 PM
    Moderator
  • KillingComputers wrote:

    I've created a little app that I'll be sending to individuals with the ACCESS 2010 runtime only.  The app has a custom Ribbon and the Shift Key Disabled.   I have someone testing it at the moment and can't get past all the Trust Center...stuff.  How do you turn all that...Stuff...off?  I'm distributing this to people on my own network.

    An alternative is to use the Auto FE Updater at www.autofeupdater.com to
    set the trust center, automatically copy down the new FEs when they are
    available and much more.

    Tony


    Tony Toews, Microsoft Access MVP
    Tony's Main MS Access pages - http://www.granite.ab.ca/accsmstr.htm
    Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/
    For a convenient utility to keep your users FEs and other files   updated see http://www.autofeupdater.com/

    Friday, December 03, 2010 8:47 PM
  • What if you want to add a key for a trusted document/database instead of the location.  From what i can see the key would look something like this:

    HKEY_CURRENT_USER/Software/Microsoft/Office/14.0/Access/Security/Trusted Documents/TrustRecords

    with a binary value (named 'file:///C:/mypath/mydatabase.accdb') that seems to be randomly generated.

    In short, what does one enter for the value field in  'Package Solution Wizard > Additional Registry Keys' to make a database trusted? Or can this just not be done?

    Thanks,

    Danny

    Wednesday, January 05, 2011 7:24 PM
  • davvu wrote:

    What if you want to add a key for a trusted document/database instead of the location.  From what i can see the key would look something like this:

    HKEY_CURRENT_USER/Software/Microsoft/Office/14.0/Access/Security/Trusted Documents/TrustRecords

    with a binary value (named 'file:///C:/mypath/mydatabase.accdb') that seems to be randomly generated.

    In short, what does one enter for the value field in  'Package Solution Wizard > Additional Registry Keys' to make a database trusted? Or can this just not be done?

    AFAIK MS has not documented what that "randomly generated" value is for
    a trusted document.  Which then means that only the user can set that
    value using the UI.

    If anyone knows differently I'd like to know so I can add the algorithm
    to the Auto FE Updater.

    Tony


    Tony Toews, Microsoft Access MVP
    Tony's Main MS Access pages - http://www.granite.ab.ca/accsmstr.htm
    Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/
    For a convenient utility to keep your users FEs and other files   updated see http://www.autofeupdater.com/

    Thursday, January 06, 2011 12:54 AM