Skip to content
Setup FoundrySetup Foundry

Documentation

Scan encrypted macros in PowerPoint Open XML presentations

This `REG_DWORD` value controls whether encrypted VBA macros in PowerPoint Open XML presentations must be scanned by antivirus software before they are loaded.

since 0.9.8.11

Purpose

Show registry keys (1)
  • HKCU\software\policies\microsoft\office\16.0\powerpoint\security\powerpointbypassencryptedmacroscan

This REG_DWORD value controls whether encrypted VBA macros in PowerPoint Open XML presentations must be scanned by antivirus software before they are loaded.

The value data has the following meanings:

  • 0: Encrypted macros must be scanned. They remain disabled when antivirus scanning is unavailable.
  • 1: Encrypted macros are scanned when antivirus software is available. If no antivirus software is available, they may load without being scanned.
  • 2: Encrypted macros may load without antivirus scanning.

If the value is absent, the resulting behavior is generally equivalent to value 0.

Notes

Security

Values 1 and especially 2 can allow encrypted VBA code to load without first being inspected for malware. Because encryption prevents the macro code from being examined before decryption, bypassing the scan increases the risk that malicious code can proceed undetected.

Value 0 prevents encrypted macros from being loaded merely because a suitable antivirus scan is unavailable.

This setting does not replace PowerPoint's other macro security controls. Whether a scanned macro is ultimately permitted to run still depends on the applicable VBA macro settings, trust decisions, and other Office security policies.

Possible side effects

With value 0, macro functionality in encrypted presentations is unavailable if PowerPoint cannot access a supported antivirus scanner or the scan cannot be completed successfully. This can disrupt automation or presentation-specific features that depend on those macros.

Notes

This is a per-user PowerPoint setting specifically for encrypted macros in Open XML presentations. It does not generally control unencrypted macros, nor does it constitute a comprehensive security scan for every type of content in the presentation.

Microsoft documentation

Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune

Microsoft: Office 2010 Security Planning

See also