Restrict Standard User from not removing the COM-Addins registered under HKLM with Admin rights.

Hello,
I have developed a COM-Addin for word 2013 by VS 2013 and installed it under the HKLM with Admin rights. Now from an non-admin account, ie Standard User I'm able to uncheck that addin from the COM-Addins dialog and remove it also. Previously I have done the
same thing for word 2007 addins and if a non-admin user tries to uncheck it the warning "The
connected state of Office Add-ins registered in HKEY_LOCAL_MACHINE cannot be changed" pops
up. But this is not happening for office 2013 apps(basically word, excel and powerpoint). 
This is happening for all Add-Ins installed under HKLM.
How can a Standard User be restricted from unchecking and removing the Office Addins registered under HKEY_LOCAL_MACHINE with same warning "The
connected state of Office Add-ins registered in HKEY_LOCAL_MACHINE cannot be changed" in
a pop-up box?
Regards, Sayan

Hi,
The behavior is changed since Office 2010. Office 2010 and Office 2013 allows a standard user to turn a per-machine add-in off by unchecking the add-in in the COM Add-ins dialog.
To restrict Standard User from not removing the COM Add-ins, we can try to add the add-in to
the Group Policy option: List of managed add-ins in the Office Group Policy template.
Word for example, the policy is under:
User Configuration\Administrative Templates\Microsoft Word 2013\Miscellaneous
To enable this policy setting, provide the following information for each add-in:
In "Value name", specify the programmatic identifier (ProgID) for COM add-ins, or specify the file name of Word add-ins.
To obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins.
To obtain the file name of an add-in, click the File menu in the application where the add-in is installed. Click Options, click Add-ins, and then use the Location column to determine the file name of the add-in.
In "Value," specify the value as follows:
To specify that an add-in is always enabled, type 1.
Hope this helps.
Regards,
Steve Fan
TechNet Community Support

Similar Messages

  • How to restrict end user from modifying/saving the workbook?

    <Moderator Message: As you deleted my comment in this thread by editing it again, I am locking it now>
    Hi,
    We have created few workbooks. The requirement is that the end user should not be able to modify or save the workbook. We tried using S_RS_Tools authorization object with "themes" in the Command ID. But this does not seem to solve our problem. Please suggest whether it is possible to enter any other value in this field to restrict access to the end user.
    We also tried including the following authorization objects with the corresponding values :
    1.S_GUI with the value Activity=60(import)
    2.S_USER_AGR with Activity = 03 and * in Role.
    3.S_BDS_DS with Activity = 03(display) and 30 ; Class Type = OT.
    4. S_USER_TCD with tcode = RRMX.
    But still the end user is able to modify the workbooks. (The end user must not be able to make changes to settings of any of the buttons in the design mode, must not be able to save the workbook).
    Please suggest the corrections required. Also kindly suggest if there are any other ways to resolve this issue <removed by moderator>.
    Your help is appreciated.
    Thanks.
    Edited by: Siegfried Szameitat on Nov 26, 2008 12:55 PM
    Edited by: suresh naidu on Nov 26, 2008 1:19 PM
    Edited by: Siegfried Szameitat on Nov 26, 2008 1:23 PM

    Hi,
    Only few people have authorization to create S.O. w.r.t. quotation (as in our case, sales ppl create quotation and Finance ppl create S.0., with reference to Quotation Only - T.Code: VTAA).
    Others have only authorization to View/ Display, VA03.
    Consult your Basis-Admin, he will create appropriate role & assign T. Code: va03 for list of user, provided by you.
    Best Regards,
    Amit.
    Note: You can't restrict anyone with T. Code: VA02, to change qty or price in Sales order, directly.

  • Authorization group - to restrict other users to not see the program code

    Hi,
    I have developed report program. Is it possible to restrict the other users to don't see the program code.
    Thanks in advance.
    Regards,
    Eswar

    Eswar:
    SAP does not allow you to restrict access to your report programs. Anybody with the right autorizations can see your programs.
    There are some tricks to achieve someting like that. Tricks consists basically in write your code without enter between lines. I think there are no effective way in SAP or ABAP to protect programs source code from curious eyes.
    Ex.:
    REPORT ztest. TABLES: ztable. DATA: g_var1...
    Regards.
    Rafael Rojas.

  • How to restrict end-user from not using certain movement-types in MB1B

    Dear Gurus,
    My client wants that end user has access to only particular movement types in MB1B.i.e only to 311 and 412,421E.
    They do not want any other movement types to be access by end-users in MB1B
    How to go about this requirement?
    Thanks in advance
    Regards
    Ram
    Edited by: RAMKUMAR WARIYAR on Jun 27, 2009 2:14 PM

    hi,
    This is possible you can restrict and allow user for movement type which they can do through any t code.
    Contact yours BASIS consultant for that
    Regards,
    Vishal
    Edited by: VS on Jun 27, 2009 5:46 PM

  • Uninstaller utility does not remove the installation from the registry

    In our environment, we publish a script in Group Policy so that both the ActiveX and Plugin installs for flash player are easily installed for staff that have limited user access on their computers.  I usually remove or replace the old MSI files from the path the above script installs from when I get new versions of Flash Player.  For a while, I've run into a problem where when the new MSI files are installed, they try to uninstall the existing installation and fail because the old MSI file is no longer at the original installation source path.  I've tried to remedy this by having the script use the uninstall_flash_player utility to manually remove the activex and plugin first, but this utility does not remove the installation details of each from the registry, and the subsequent installations of the MSI files fail.  I have to uninstall the existing flash player installations first or perform a registry hack to formally remove the installation from Windows, and then the new installation will succeed.
    Does anybody have any advice for making this process work better?  Would this be considered a bug with the uninstaller tool?

    Hi, Until someone can reply to your thread/question, you may want to see this thread.
    http://forums.adobe.com/thread/826773?tstart=0
    eidnolb

  • I have 3 songs waiting to download for 3 days. I am unable to swipe to delete and I have rebulit my itunes libary which did not remove the songs from my phone. What do I need to do to get rid of these songs?

    I have 3 songs waiting to download for 3 days. I am unable to swipe to delete and I have rebulit my itunes libary which did not remove the songs from my phone. What do I need to do to get rid of these songs?

    Hi RadarCat16,
    Welcome to the Apple Support Communities!
    I know it can be frustrating when you are waiting for content to download to your iPhone from the iTunes Store. There are a few steps I would recommend in this situation. Please read over and follow the steps in the attached article.
    iTunes: How to resume interrupted iTunes Store downloads
    http://support.apple.com/kb/HT1725
    If your download was interrupted using your iPhone, iPad, or iPod touch
    From the Home screen, tap the iTunes app.
    For iPhone or iPod touch, tap More > Downloads. For iPad, tap Downloads.
    Enter your account name and password if prompted.
    Tap the blue download arrow to resume.
    If you can't complete the download on your iOS device, you can download it in iTunes on your Mac or PC and then sync it to your iOS device. You can also transfer purchases from your iPhone, iPad, or iPod to a computer.
    Have a great day,
    Joe

  • My Mac G-4 OS X will not image an icon of the zip disk with I inserted into my computer's built-in Zip Drive, therefore I can not remove the zip disk from my computer.  What can I do?

    My Mac G-4 OS X will not image an icon of the zip disk with I inserted into my computer's built-in Zip Drive, therefore I can not remove the zip disk from my computer.  What can I do?

    Thanks Old Comm Guy, BD Aquam and Texas Mac Man for youradvice and reply to my question
    and problem with my Zip Drive.  However:
        1.  Depressing mouse buttonon start up did not eject the zip disk.
        2.  To examine front of zipdrive, I had to remove many screws and several plastic case
             coverings.  Upon doing thatI discovered that, unfortunately, there is no whole in front
              of mybuilt-in zip hardware drive for me to insert a paper clip to manually eject zipdisk.
          3.  I went to the Utilities folder in myMac OS X Application folder, but I could not find
               theiomega zip drive in there.
    Also, I did go into my "9" System folder and thento the Extensions folder within it and did find an icon of an
    Iomega Driver. When double clicking on it a window came upstating I was opening the application
    "ColorSync Extension" for thefirst time, and asking if I was sure I wanted to open this application.
    Uponclicking open nothing happened - nothing opened.
    I also went into the "System X" folder>Libraryfolder>Extension folder>IomegaSAM.ket icon and double
    clicked on it and asmall window opened stating "Compiling file List", however nothingopened it just
    continued to compile, so I closed it.
    Within my Mac OS X HD>  Applications>Iomega folder>Iomega Tools.app a smallwindow opened up
    with several options (Erase, Protect, Disk Info and DriveInfo). Clicking on the Drive Info a message says:
    "No Iomega Drives or noIomega Driver found.  Therefore, Ihave gone to Mac, Iomega and other websites
    trying to find a Driver for thebuilt-in Zip Drive in my Mac G-4 OS X 10.4.11, but have not really found anythat work.
    CAN ANYONE TELL ME IF THERE IS A WEBSITE WHERE I CANDOWNLOAD A NEW DRIVER FOR MY ZIP DRIVE?
    Thanks,     Peterfromcrystallake

  • TS1702 Please I can not remove the viber icon from my iPhone 4s as it is a gray icon and have the word "waiting" under it and if I press long to have the (x) to delete it the (x) will not appear

    Please I can not remove the viber icon from my iPhone 4s as it is a gray icon and have the word "waiting" under it and if I press long to have the (x) to delete it the (x) will not appear

    Will it let you delete it on the phone now? If it still shows waiting, just tap it once on the app itself and it should download the rest  of the way. Do it while your on wifi tho.

  • Retrieving the COM class factory for component with CLSID {479A1AAC-C148-40BB-9868-A9773DA66AF9} failed due to the following error: 80040154 Class not registered (Exception from HRESULT: 0x80040154 (REGDB_E_CLASSNOTREG)).

    Hi,
    I tried to use the
    SWFToImageObject Objswfobj = new SWFToImageObject(); for Capturing the Chart as Image using SWFToImage.dll
    But whenever creating the object as above firsrt line of the code i am getting the below error. 
    Retrieving the COM class factory for component with CLSID {479A1AAC-C148-40BB-9868-A9773DA66AF9} failed due to the following error: 80040154 Class not registered (Exception from HRESULT: 0x80040154 (REGDB_E_CLASSNOTREG)).
    if required any components or any solutions.
    Thaks in advance.
    Regards
    Ravikumar

    Hi,
    I am not able to find sharepoint word in your post so can you please confirm that your question is related to sharepoint?
    > Class not registered
    For you issue, this error usually comes if you don't have DLL in proper place so add SWFToImage.dll in GAC and then add this assembly reference in your project from GAC. 
    Hemendra: "Yesterday is just a memory,Tomorrow we may never see"
    Whenever you see a reply and if you think is helpful, click "Vote As Helpful"! And whenever
    you see a reply being an answer to the question of the thread, click "Mark As Answer

  • My wife recieved invite event from my PC Outlook. She accepted it, but it never showed up on her iCloud or iCal on our iMac. Then I removed her as an invitee and it did not remove the event from her iPhone. So now she has a event on her iPhone that can't

    My wife recieved invite event from my PC Outlook. She accepted it, but it never showed up on her iCloud or iCal on our iMac. Then I removed her as an invitee and it did not remove the event from her iPhone. So now she has a event on her iPhone that is not on either her iCloud or iCal. How do I remove it from her iPhone?

    1) You asked "Does she need to reconnect to that itunes/computer and if so what do we need to do to remove this folder of pics from her ipod?" Yes, you have to connect the iPod to that computer and go to the Photos pane for the iPod in iTunes and uncheck sync photos and the click on synce/apply. In the future do not check sync photos.
    iOS and iPod: Syncing photos using iTunes
    2)
    Create a NEW account for using these instructions. Make sure you follow the instructions. Many do not and if you do not you will not get the None option. You must use an email address that you have not used with Apple before.
    Creating an iTunes Store, App Store, iBookstore, and Mac App Store account without a credit card
    Then on the iPod go to
    - Settings>Messages>Send and receive and sign out your ID and sign into hers. Make sure that only her ID email address is listed.
    - Settings>FaceTime sign out of your ID and sign into hers. Make sure that under You can be reached at only her ID email address is listed
    - Settings>iCloud and sign out and sign in with hers
    Contnue to use the commpn ID/account for Settings>iTunes and App stores.

  • Need to raise a restriction that user can not put multiple PO references in PO Number field in Sales Order.

    Hi,
    reference to subject we need a restriction that user can not put different PO reference within an Order. One Sale Order should have one PO reference at Header and Line's of the sales order. Currently what is our issue that all the sales order are created by Quotes from quoting module. Whatever the line items come from quotes into sales order having no PO Number reference with them but when user completing the sales order user puts the PO reference at Sales Order Header which can not be linked or passed on those line items who captured from quotation. Due to this PO reference value difference between Lines and Header system generates multiple AR invoices based on unique PO Number references within an order.
    we need single PO reference per sales order. How can we restrict this if line level PO number reference is different from Header PO number reference that user can not proceed further?
    Regards
    Kaleem A. Bhatti

    Dear Zakir,
    Thanks a lot for your favorable response. The query is solved now by defaulting rules.
    Regards
    Kaleem A. Bhatti

  • Restrict A User From Changing A Payment Term While Adding A/R Invoice

    Dear Experts,
    We want to restrict our users from changing payment terms while adding A/R Invoice.
    We use SAP B1 2007 b.
    Thanking  you
    Pradnya

    Hi,
    try below code in transaction notification procedure:
    if (@object_type = '13') and (@transaction_type IN ('A', 'U'))
    BEGIN
    IF exists (select T0.DocEntry FROM OINV T0 Inner Join OCRD T1 on T0.CardCode=T1.CardCode Where T0.GroupNum  !=T1.GroupNum and T0.DocEntry =@list_of_cols_val_tab_del)
              Begin
                   SET @error = 30
                   SET @error_message =N'You are not authorized to change payment terms'     
              end
    END
    for how the transaction notification works or how to use :
    check How to use Transaction Notification
    Thanks,
    Neetu

  • Trying to dowload the latest version of itunes and I get a message that it can not remove the old version

    I bought a new touch and tried to plug it into my pc. itunes said I need the 10.5 version with new ipod. I downloaded the latest version and when I try to install it to my pc it gives me the message that it can not remove the old version and contact tech support. Please help.

    A window pops up when I try to install that says the old version of itunes can not be removed contact tech support. Then another window pops up that says   the feature you ar trying to use is on a network resource that is unavailable.
    perfect, thanks.
    Download the Windows Installer CleanUp utility from the following page (use one of the links under the thingy on the Major Geeks page):
    http://majorgeeks.com/download.php?det=4459
    To install the utility, doubleclick the msicuu2.exe file you downloaded.
    Now run the utility ("Start > All Programs > Windows Install Clean Up"). In the list of programs that appears in CleanUp, select anyiTunesentries and click "Remove", as per the following screenshot:
    Quit out of CleanUp, restart the PC and try another iTunes install. Does it go through properly this time?

  • How to restrict a user from deleting a PO

    Dear All,
    I have to restrict some users from deleting a line item in PO. They will be authorised to create & change the PO but they must not be able to delete the line item.
    Further it would be more helpful if it is possible to restrict them from deleting one perticular type of  PO(ex-Capex PO). They can change a capex PO but can not delete it.
    Any of the answars will be highly appreaciated.
    Regards
    Rutabhadra Panda

    Hello,
    Speak to your basis guy, put if you have created Capex PO as a particular document type, then maintain authorisation object M_BEST_BSA (Document Type in Purchase Order) and activity 06 delete.
    You may find that delete is still possible through activity 02 change, so you might need to maintain different roles depending on what you need.
    Thanks.

  • I tried installing an update to QuickTime. An error occurred and it wouldn't install. I tried removing the QuickTime program, but a window appeared telling me that a fatal error  ccurred during installation and I could not remove the program.  Now what?

    I tried installing an update to QuickTime. An error occurred and it wouldn't install. I tried removing the QuickTime program, but a window appeared telling me that a fatal error  ccurred during installation and I could not remove the program.  Now what?

    I tried removing the QuickTime program, but a window appeared telling me that a fatal error  ccurred during installation and I could not remove the program.
    I think we'd better see if some other application (other than QuickTime itself) has dropped old QuickTime componentry in the system files on the PC. (If there's a version mismatch between the old componentry and the "QuickTime proper" componentry, that can create those symptoms.)
    So we'll go looking for the older QuickTime componentry in the most common locations for it to be stashed.
    First we'll need to change some view options on the PC.
    1. Open My Computer from the desktop or Start menu.
    2. In the Tools menu, click Folder Options.
    3. Click the View tab.
    4. In the "Advanced settings" pane under "Hidden files and folders" make sure that the "Show hidden files and folders" option is selected, and the "Hide extensions for known file types" option is unchecked.
    5. Click OK.
    Now in My Computer, open your C drive.
    Open the "Windows" folder.
    Open the "system32" folder.
    What files and/or folders can you see in there with QuickTime in the file/folder name? (In a standard installation of QuickTime, you should see precisely two files ... QuickTime.qts and QuickTimeVR.qtx ... and no QuickTime folders whatsoever.)

Maybe you are looking for

  • Windows 7 on external drive

    Hey all, I want to have a copy of Windows 7 available for rare use. I don't want to have a Bootcamp partition on my hard drive. Is it possible to have Bootcamp on an external drive? I want to use a flash drive. I tried using WinClone and found out th

  • SQL 2008 R2 small business server OS edition check fails on SBS 2011 premium install on SBS member server.

    I am having trouble installing SQL 2008 Small Business Edition on top of MS 2008 std from the SBS premium suite. I recieve the SQL Server 2008 R2 setup log error stateing "Operating system supported for edition "Failed". The specific error is "Editio

  • ITunes 7.1 - USB 1.1 error msg but using USB 2

    Upgraded to iTunes 7.1 and now when I plug in my iPod (5g, 30gb) I get the following error message: The iPod "name of iPod" is connected to a low-speed USB 1.1 port. For better performance you should connect with a high-speed port if one is available

  • To change the default date format of OID

    Hello Gurus, Any idea on how to change the default date format of OID? The default date format of OID is something like "yyyy-mm-dd hh:mm:ss .0-0700" I want to change it to "yyyymmddhhmmss.0-0800". Is there any system property to do the same. I have

  • Unable to download during pdf-Word conversion

    at the tail end of the process (converting a pdf doc to Word),  I am unable to download the doc.  Why?