Updated: 2009-04-09

As an administrator of Microsoft Office Outlook 2007, you can configure programmatic security settings to manage restrictions for the following technologies: the Outlook object model, Collaboration Data Object (CDO), and Simple MAPI. These technologies are defined as follows:

Outlook object model—The Outlook object model allows you to programmatically manipulate data stored in Outlook folders.
CDO—Collaboration Data Object (CDO) libraries are used to implement messaging and collaboration functionality in a custom application. CDO is a COM wrapper of the MAPI library and can be called from any development language that supports Automation. CDO implements most but not all MAPI functionality, but more than Simple MAPI.
Simple MAPI—Simple MAPI enables developers to add basic messaging functionality, such as sending and receiving messages, to their Microsoft Windows-based applications. It is a subset of MAPI, which provides complete access to messaging and information exchange systems.

You can use Group Policy to configure programmatic security settings. In Group Policy, load the Outlook template (Outlk12.adm). The attachment options settings are located under User Configuration\Administrative Templates\Microsoft Office Outlook 2007\Security\Security Form Settings\Programmatic Security. These settings cannot be configured by using the Office Customization Tool.

The Outlook template and other ADM files can be downloaded from 2007 Office System Administrative Templates (ADM) on the Microsoft Download Center.

Note:
To use Group Policy to configure programmatic security settings, you must first configure the method that Outlook uses for security settings correctly. For more information about setting the Outlook security settings method, see Plan for configuring security settings in Outlook 2007.

The following table describes the Group Policy options for programmatic settings. You can choose one of the following settings for each item:

Prompt user—Users receive a message allowing them to choose whether to allow or deny the operation. For some prompts, users can choose to allow or deny the operation without prompts for up to 10 minutes.
Automatically approve—The operation is allowed and the user does not receive a prompt.
Automatically deny—The operation is not allowed and the user does not receive a prompt.

Item	Description
Configure Outlook object model prompt when sending mail	Specifies what happens when a program attempts to send mail programmatically by using the Outlook object model.
Configure Simple MAPI sending prompt	Specifies what happens when a program attempts to send mail programmatically by using Simple MAPI.
Configure Outlook object model prompt when accessing an address book	Specifies what happens when a program attempts to gain access to an address book by using the Outlook object model.
Configure Simple MAPI name resolution prompt	Specifies what happens when a program attempts to gain access to an address book by using Simple MAPI.
Configure Outlook object model prompt when reading address information	Specifies what happens when a program attempts to gain access to a recipient field, such as To, by using the Outlook object model.
Configure Simple MAPI message opening prompt	Specifies what happens when a program attempts to gain access to a recipient field, such as To, by using Simple MAPI.
Configure Outlook object model prompt when responding to meeting and task requests	Specifies what happens when a program attempts to send mail programmatically by using the Respond method on task requests and meeting requests. This method is similar to the Send method on mail messages.
Configure Outlook object model prompt when executing Save As	Specifies what happens when a program attempts to programmatically use the Save As command on the File menu to save an item. Once an item has been saved, a malicious program could search the file for e-mail addresses.
Configure Outlook object model prompt when accessing the Formula property of a UserProperty object	Specifies what happens when a user adds a Combination or Formula custom field to a custom form and binds it to an Address Information field. By doing this, code can be used to indirectly retrieve the value of the Address Information field by getting the Value property of the field.
Configure Outlook object model prompt when accessing address information via UserProperties.Find	Specifies what happens when a program attempts to search mail folders for address information by using the Outlook object model.

Download this book

This topic is included in the following downloadable books for easier reading and printing:

See the full list of available books at Office Resource Kit information.