Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to use group policy to add a subdirectory of the user's home directory as a trusted location for Microsoft Access 2007 (User Configuration/Administrative Templates/Microsoft Office Access 2007/Application Settings/Security/Trust Center/Trusted Locations). However, where I'm having difficulty is that it doesn't seem like the group policy works with a relative path (%userprofile%\My Documents\Subdirectory). Is that true? If so, would a feasible workaround be a loginscript that adds the appropriate registry key?

share|improve this question
up vote 2 down vote accepted

An alternative would be to use the Auto FE Updater. This utility has an option to set the trusted location of the FE automatically. It will also copy down new Access FEs and associated files when updates are made available on the server, create shortcuts and more.

I would also suggest using a subfolder of the %appdata% aka Application Data folder to store the Access FE and associated files as this is somewhat hidden and thus less likely for the users to muck with the files.

share|improve this answer
When you recommend AppData are you taking account of the new layout in Vista/Win7 with the roaming folder, which is where this data is supposed to go? How does one determine what folder %appdata% is? Using the environment variable or Windows API? – David W. Fenton Aug 30 '10 at 20:00
David, I don't know enough about roaming folders in Vista/Win 7. I haven't had any questiohs on that line from the users. In the AutoFEUpdater the %appdata% is the special folder API call using the constant CSIDL_APPDATA and not the environment variable. – Tony Toews Aug 31 '10 at 19:49

for the logon script way, you should add the path to:

HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Access\Security\Trusted Locations\LocationX

Where X is the location number

for %userprofile%, i didn't try yet

share|improve this answer
Just an FYI. You don't actually need to use Locationx after \Trusted Locations\. You can put anything in there that you want such as the name of your application. I would suggest not using Location as some folks may already have some locations defined and conceivably you could wipe thiers out. – Tony Toews Aug 11 '10 at 23:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.