Only trust VBA macros that use V3 signatures: registry value onlytrustvbasignaturev3UserHKCU\software\policies\microsoft\vba\security

Policy ID: L_OnlyTrustVBASignatureV3
Scope: User Configuration
Supported on: At least Windows Server 2016, Windows 10
Source: Microsoft 365 Apps / Office Administrative Templates (version 5568.1000)
Category: Microsoft Office 2016 › Security Settings › Trust Center

Registry

onlytrustvbasignaturev3

REG_DWORDUser

HKCU\software\policies\microsoft\vba\security Current key

Enabled value: 1
Disabled value: 0

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\software\policies\microsoft\vba\security]

; Options (use only one)
; Enabled
"onlytrustvbasignaturev3"=dword:00000001
; Disabled
"onlytrustvbasignaturev3"=dword:00000000

CMD

:: Options (use only one)

:: Enabled
reg add "HKCU\software\policies\microsoft\vba\security" /v "onlytrustvbasignaturev3" /t REG_DWORD /d 1 /f
:: Disabled
reg add "HKCU\software\policies\microsoft\vba\security" /v "onlytrustvbasignaturev3" /t REG_DWORD /d 0 /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\software\policies\microsoft\vba\security' -Force | Out-Null

# Options (use only one)
# Enabled
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\vba\security' -Name 'onlytrustvbasignaturev3' -PropertyType DWord -Value 1 -Force | Out-Null
# Disabled
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\vba\security' -Name 'onlytrustvbasignaturev3' -PropertyType DWord -Value 0 -Force | Out-Null