# MS Office Protected Mode **URL:** \ **Category:** Factual Questions\ **Created:** [February 22, 2015, 5:32pm UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353 "2015-02-22T17:32:58Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![dolphinboy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dolphinboy/32/330_2.png) [@dolphinboy](https://boards.straightdope.com/u/dolphinboy)\ **Post date:** [February 22, 2015, 5:32pm UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/1 "2015-02-22T17:32:58Z")
When I open a MS Office document someone has sent me it is almost only in ‘READ’ or ‘PROTECTED’ mode, which means I have to click a button in order to edit or print it. What is the purpose of this feature? Are they afraid I am going to edit it by accident? Are they trying to protect me from viruses? I just don’t get it and it’s annoying. Is there some way to turn this ‘feature’ off? ---
**Author:** ![Habeed](https://avatars.discourse-cdn.com/v4/letter/h/a587f6/32.png) [@Habeed](https://boards.straightdope.com/u/Habeed)\ **Post date:** [February 22, 2015, 6:18pm UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/2 "2015-02-22T18:18:59Z")
As I understand it, somewhere in the bowels of Office is support for a proprietary, interpreted programming language of some sort. It’s called “macros”. I’ve never seen or used this language, but apparently it is so poorly designed and implemented that it is possible to craft a macro that hijacks the computer that opens it. Why doesn’t Microsoft junk their current macro interpreter and introduce one with a proper sandbox? Do they have any idea how much time their products waste when used in the default settings? Anyways, that protected mode is a poorly made choice that wastes the time of millions of Americans. Virtually anyone who ever opens a document is going to want to print or edit it, so it doesn’t really protect from jack shit. Office needs to be able to either detect accurately if a document actually has a virus, or, it really needs sandboxing so that it doesn’t matter. ---
**Author:** ![andrewm](https://avatars.discourse-cdn.com/v4/letter/a/c57346/32.png) [@andrewm](https://boards.straightdope.com/u/andrewm)\ **Post date:** [February 22, 2015, 6:38pm UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/3 "2015-02-22T18:38:59Z")
> [@Habeed](#): > > Office … really needs sandboxing so that it doesn’t matter. Protected mode _is_ a sandbox. That’s why you can’t save or print from it. ---
**Author:** ![Habeed](https://avatars.discourse-cdn.com/v4/letter/h/a587f6/32.png) [@Habeed](https://boards.straightdope.com/u/Habeed)\ **Post date:** [February 23, 2015, 7:03am UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/4 "2015-02-23T07:03:25Z")
> [@andrewm](#): > > Protected mode _is_ a sandbox. That’s why you can’t save or print from it. Well, it’s a worthless, incompetent sandbox. It provides no protection whatsoever, it just wastes our time. ---
**Author:** ![dstarfire](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dstarfire/32/5762_2.png) [@dstarfire](https://boards.straightdope.com/u/dstarfire)\ **Post date:** [February 23, 2015, 7:42am UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/5 "2015-02-23T07:42:30Z")
Office documents can contain macros, which are mini-programs that have access to all of Office’s commands/features/menus/etc… They’re normally used to automate tedious or repetitive actions, but can also be used to perform a bunch of harmful actions without the user’s knowledge (there’s nothing inf Office that says a macro has to inform the user of what it’s doing). Protected mode prevents macros from running. However, since macros are often used for legitimate purposes (e.g. to update content to match the date and time, or modify information you type to match a pre-defined format) certain other features have to be disabled as well. As for disabling it, simply type the following words into the search engine of your choice for several thousand links each explaining how to turn this feature off. ```auto microsoft office disable "protected mode" ``` ---
**Author:** ![dolphinboy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dolphinboy/32/330_2.png) [@dolphinboy](https://boards.straightdope.com/u/dolphinboy)\ **Post date:** [February 23, 2015, 5:07pm UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/6 "2015-02-23T17:07:01Z")
Thanks dstarfire. ---
**Author:** ![gigi](https://avatars.discourse-cdn.com/v4/letter/g/a587f6/32.png) [@gigi](https://boards.straightdope.com/u/gigi)\ **Post date:** [February 23, 2015, 7:50pm UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/7 "2015-02-23T19:50:39Z")
File -\> Options -\> Trust Center -\> Trust Center Settings -\> Protected View - \> uncheck ---
**Author:** ![albino\_manatee](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/albino_manatee/32/2_2.png) [@albino\_manatee](https://boards.straightdope.com/u/albino_manatee)\ **Post date:** [February 23, 2015, 8:19pm UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/8 "2015-02-23T20:19:52Z")
> **[What is Protected View? - Microsoft Support](https://support.microsoft.com/en-us/office/what-is-protected-view-d6f09ac7-e6b9-4495-8e43-2bbcdbcb6653?ui=en-us&rs=en-us&ad=us)** > > See what Protected View is and how it can help protect you from potentially malicious software. ---
**Author:** ![CookingWithGas](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cookingwithgas/32/485_2.png) [@CookingWithGas](https://boards.straightdope.com/u/CookingWithGas)\ **Post date:** [February 23, 2015, 11:16pm UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/9 "2015-02-23T23:16:43Z")
I still don’t understand protected view if it’s only purpose is to inhibit macros. Macro security has been around for a long time. Since Excel 2003 I get prompted as to whether I want to allow macros to run in a macro-enabled file. Even ones that I create myself. So what does Protected Mode add to that? Plus I get protected mode whenever I open an attachment from an email, even if it is not a macro-enabled file. ---
**Author:** ![gigi](https://avatars.discourse-cdn.com/v4/letter/g/a587f6/32.png) [@gigi](https://boards.straightdope.com/u/gigi)\ **Post date:** [February 23, 2015, 11:55pm UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/10 "2015-02-23T23:55:36Z")
> [@CookingWithGas](#): > > I still don’t understand protected view if it’s only purpose is to inhibit macros. Macro security has been around for a long time. Since Excel 2003 I get prompted as to whether I want to allow macros to run in a macro-enabled file. Even ones that I create myself. So what does Protected Mode add to that? Plus I get protected mode whenever I open an attachment from an email, even if it is not a macro-enabled file. From the last link: “Files from the Internet and from other potentially unsafe locations can contain viruses, worms, or other kinds of malware that can harm your computer. To help protect your computer, files from these potentially unsafe locations are opened in Protected View. By using Protected View, you can read a file and see its contents while reducing the risks.” I get this even just opening a file someone has emailed me; I assume it’s because our email is in the cloud and it’s like opening something from the Internet?? ---
**Author:** ![AHarris](https://avatars.discourse-cdn.com/v4/letter/a/bcef8e/32.png) [@AHarris](https://boards.straightdope.com/u/AHarris)\ **Post date:** [February 24, 2015, 12:28am UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/11 "2015-02-24T00:28:37Z")
> [@gigi](#): > > From the last link: “Files from the Internet and from other potentially unsafe locations can contain viruses, worms, or other kinds of malware that can harm your computer. To help protect your computer, files from these potentially unsafe locations are opened in Protected View. By using Protected View, you can read a file and see its contents while reducing the risks.” > > I get this even just opening a file someone has emailed me; I assume it’s because our email is in the cloud and it’s like opening something from the Internet?? It’s basically the two-click rule for e-mailed files. E-mailing a word document with a virus embedded in it is a common method of propagating them. When you opened or previewed the document, the virus would run and infect your computer. One of the decisions that Microsoft made to help combat this was to create protected mode. Now when you receive an infected file, if you open it, it doesn’t automatically have access to make changes to your computer. In general, you still should avoid opening files from sources that you don’t trust, but this helps if someone who you are expecting a file from is infected. ---
**Author:** ![CookingWithGas](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cookingwithgas/32/485_2.png) [@CookingWithGas](https://boards.straightdope.com/u/CookingWithGas)\ **Post date:** [February 24, 2015, 12:38am UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/12 "2015-02-24T00:38:20Z")
> [@gigi](#): > > I get this even just opening a file someone has emailed me; I assume it’s because our email is in the cloud and it’s like opening something from the Internet?? Opening a file from an email _is_ opening something from the Internet. > [@AHarris](#): > > E-mailing a word document with a virus embedded in it is a common method of propagating them. When you opened or previewed the document, the virus would run and infect your computer. I’m still not getting how opening a Word file with no macros can cause an infection. ---
**Author:** ![Melbourne](https://avatars.discourse-cdn.com/v4/letter/m/b5e925/32.png) [@Melbourne](https://boards.straightdope.com/u/Melbourne)\ **Post date:** [February 24, 2015, 1:03am UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/13 "2015-02-24T01:03:57Z")
> [@gigi](#): > > I get this even just opening a file someone has emailed me; I assume it’s because our email is in the cloud and it’s like opening something from the Internet?? The file has an alternate data stream (ADS) named “Zone.Identifier” which stores information about where the file came from. You can see the description of the zones in “Internet Options”: the values are 0 URLZONE\_LOCAL\_MACHINE 1 URLZONE\_INTRANET 2 URLZONE\_TRUSTED 3 URLZONE\_INTERNET 4 URLZONE\_UNTRUSTED MS office uses both the Zone identifier, and the actual present location: a file that’s “on the internet” will be untrusted because it’s in an untrusted location, and a file download from the internet will be untrusted because it has the untrusted zone value. In older versions of MS office, untrusted files and files in untrusted locations were opened with macros dissabled. In newer versions, such files are opened in a sandbox (and with macros dissabled). The sandbox helps protect (“security in depth”) against strange corruption exploits like the many Flash and PDF exploits. MS Office was never a top target for this kind of attack: that would be Flash, Acrobat Reader and IE, but as the problems with Flash and Acrobat reader became more well known, protections like this became more common. ---
**Author:** ![AHarris](https://avatars.discourse-cdn.com/v4/letter/a/bcef8e/32.png) [@AHarris](https://boards.straightdope.com/u/AHarris)\ **Post date:** [February 24, 2015, 1:42am UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/14 "2015-02-24T01:42:53Z")
> [@CookingWithGas](#): > > I’m still not getting how opening a Word file with no macros can cause an infection. If there are no macros and the file is properly formed, it can’t. As mentioned by Melbourne, while Word does have problems with this, there are other applications that are bigger vectors of this type of attack. The issue is that you have 3 choices: 1. Before a user opens any file from the internet, you can run it through a comprehensive virus scan keeping in mind that there are people who make a living by keeping ahead of anti-virus patterns. Also, if you miss any viruses, people will blame you. 2. Discontinue features that users have come to expect and lose even more market share. 3. Throw everything from the internet into a sandbox, inform the user why they don’t have any functionality, and make it easy for the user to get that functionality back. ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [February 24, 2015, 8:03pm UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/15 "2015-02-24T20:03:29Z")
> [@Habeed](#): > > Why doesn’t Microsoft junk their current macro interpreter and introduce one with a proper sandbox? Do they have any idea how much time their products waste when used in the default settings? Many of the core functions of office macros are for interaction with (and control of) the file system, with drivers, other office applications and the OS itself. Sandboxing would render much of the useful functionality impotent. ---
**Author:** ![Habeed](https://avatars.discourse-cdn.com/v4/letter/h/a587f6/32.png) [@Habeed](https://boards.straightdope.com/u/Habeed)\ **Post date:** [February 25, 2015, 1:17am UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/16 "2015-02-25T01:17:12Z")
> [@Mangetout](#): > > Many of the core functions of office macros are for interaction with (and control of) the file system, with drivers, other office applications and the OS itself. Sandboxing would render much of the useful functionality impotent. Well, there’s your problem. That should never have been possible in the first place. ---
**Author:** ![Keeve](https://avatars.discourse-cdn.com/v4/letter/k/f07891/32.png) [@Keeve](https://boards.straightdope.com/u/Keeve)\ **Post date:** [February 25, 2015, 1:21pm UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/17 "2015-02-25T13:21:00Z")
for some reason, no one is understanding the OP’s question the way I understand it: word should first check to see if there is a macro present in the file. Only if there is indeed a macro present, then it should go into protected mode. But if there is no macro present, why bother with protected mode? ---
**Author:** ![Learjeff](https://avatars.discourse-cdn.com/v4/letter/l/94ad74/32.png) [@Learjeff](https://boards.straightdope.com/u/Learjeff)\ **Post date:** [February 25, 2015, 10:56pm UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/18 "2015-02-25T22:56:41Z")
IMHO it’s a useless feature designed to assuage the concerns of idiots who don’t realize the feature is useless. ---
**Author:** ![Melbourne](https://avatars.discourse-cdn.com/v4/letter/m/b5e925/32.png) [@Melbourne](https://boards.straightdope.com/u/Melbourne)\ **Post date:** [February 26, 2015, 2:17am UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/19 "2015-02-26T02:17:59Z")
> [@Keeve](#): > > for some reason, no one is understanding the OP’s question the way I understand it: word should first check to see if there is a macro present in the file. Only if there is indeed a macro present, then it should go into protected mode. But if there is no macro present, why bother with protected mode? … … > [@Melbourne](#): > > The sandbox helps protect (“security in depth”) against strange corruption exploits like the many Flash and PDF exploits. ---
**Author:** ![Melbourne](https://avatars.discourse-cdn.com/v4/letter/m/b5e925/32.png) [@Melbourne](https://boards.straightdope.com/u/Melbourne)\ **Post date:** [February 26, 2015, 2:20am UTC](https://boards.straightdope.com/t/ms-office-protected-mode/713353/20 "2015-02-26T02:20:53Z")
> [@Habeed](#): > > Well, there’s your problem. That should never have been possible in the first place. Yep, they should have just stuck with emacs and vi. Programming languages have no place in an editor. [Next page](https://boards.straightdope.com/t/ms-office-protected-mode/713353.md?page=2)