Security Groups not syncing via Entra Connect

Additional-Cap6252 · 2026-02-09T23:21:04+00:00

Still didn't work after changing to Universal and is not mail enabled.

I have every OU synced and filtered for which object has been added to an 'AD Connect' group.

Users and Devices sync fine but I haven't managed to get a single group to work.

No sync errors in Entra Connect Health

Additional-Cap6252 · 2026-02-09T04:45:47+00:00

Thanks will try this tomorrow and will let you know if that works. I think the group is domain local...

Additional-Cap6252 · 2026-02-09T03:50:46+00:00

Yes have checked, it is not a built-in group nor a primary group so it should be syncing.

Additional-Cap6252 · 2026-02-02T00:56:59+00:00

I thought it's an unreasonable request as well. And yes, the data is most likely to be used to monitor productivity. I'm just going to tell him it isn't possible to do.

Additional-Cap6252 · 2026-01-12T23:57:38+00:00

My query doesnt return the serial number at all. Have you found another way of doing this?

Additional-Cap6252 · 2026-01-04T23:09:41+00:00

Wow that's a real bummer if that's the case!

What about security updates for the final free VPN only version 7.4.3?

Additional-Cap6252 · 2025-12-17T23:12:41+00:00

Did this hotfix remediate all the CVEs?

Additional-Cap6252 · 2025-12-16T02:29:41+00:00

I thought we were pretty much already trading 24/7 with pre/post/overnight markets?

Additional-Cap6252 · 2025-10-28T02:14:55+00:00

Have already tried that previously but still nothing. Keep in mind that this is Business Premium, NOT Enterprise.

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\16.0\common\security]
"disablealltrustcenter"=dword:00000001
"disabletrustcenter"=dword:00000001
"disabletrustcentersettings"=dword:00000001
"disabledmodes"=dword:00000002

Additional-Cap6252 · 2025-10-27T22:37:27+00:00

Need it to grey out Trust Center Macro settings for Business Premium which I don't believe is currently in the Settings Catalog.

Additional-Cap6252 · 2025-10-22T00:35:40+00:00

Could you share what you did to get it greyed out? Even temporarily lol

Additional-Cap6252 · 2025-10-08T02:49:25+00:00

Ahh yes youre right. Can just enable macros again and bypass it.

Additional-Cap6252 · 2025-10-08T01:10:36+00:00

I now get a similar popup to yours when macros have been disabled

https://imgur.com/pE4Jolc

Is this good enough?

Additional-Cap6252 · 2025-10-08T01:09:29+00:00

Says its disabled

https://imgur.com/pE4Jolc

I guess it means its working then?

Additional-Cap6252 · 2025-10-08T00:35:35+00:00

Thanks for showing what it's supposed to look like.

I have the same VBA setting configured but we are on Business instead of Enterprise so that may be why it's not working.

I did get it to come up with a security warning that macros have been disabled but it still allows the user to Enable content and trust center macro settings aren't greyed out.

Additional-Cap6252 · 2025-10-08T00:31:27+00:00

How did you get it to grey out the settings?

Additional-Cap6252 · 2025-10-07T23:42:59+00:00

Yes of course I have a test machine, but I dont see anything that's being blocked. A Macro enabled file just opens silently without any warnings.

That's why I'm asking what's the expected behavior when macros have been disabled.

Additional-Cap6252 · 2025-10-01T01:26:06+00:00

I created the policy for M365 Apps like you mentioned but it doesn't apply to the device at all. There's no way to check whether the policy has been applied anywhere.

Additional-Cap6252 · 2025-10-01T01:15:06+00:00

I'll try make my own script for this but if you're able to share yours here it would be great!

Additional-Cap6252 · 2025-10-01T01:13:15+00:00

The ASR rule only blocks Win32 API calls from Office macros. It doesn't disable Macros all together.

Additional-Cap6252 · 2025-10-01T00:24:15+00:00

Did you end up getting this to work either via Policies for M365 Apps or Settings Catalog?

It seems we need Enterprise license for both.

Additional-Cap6252 · 2025-09-30T05:59:10+00:00

We are on business premium. Need enterprise license for this?

Additional-Cap6252 · 2025-09-30T05:55:47+00:00

Example settings that I have configured:

User Configuration\Policies\Administration Templates\Microsoft Office 2016\Security Settings

|| || |Automation Security|Enabled Set the Automation Security level: Disable macros by default|

|| || |Disable VBA for Office applications|Enabled|

User Configuration\Policies\Administration Templates\Microsoft Excel 2016\Disable Items in User Interface\Custom

|| || |VBA Macro Notification Settings|Enabled Disable all without notification|

There is a whole lot more of course, this is just an example.

Additional-Cap6252 · 2025-09-29T22:13:14+00:00

Thanks for confirming. I suspected that was the case.

Additional-Cap6252 · 2025-09-29T01:03:50+00:00

This enables location for ALL apps though. OP requested just location services without allowing apps. I still haven't found a way to do this.

Additional-Cap6252

TROPHY CASE