Flash embedded in Excel

[Acydman]

Hi

Does anyone know how to stop Flash running in Excel, we have games emailed in embedded in Excel that are written in Flash.

thanks

mark O

 

[combo]

If the flash is on the worksheet:
You need to disable macros on open or switch design mode (display Visual Basic toolbar and select design mode). If the worksheet isn't protected, you can select flash object and delete it.

For the flash on the userform:
Select all worksheets (in excel window) and copy into new workbook. You can also go to vba project (Tools>Macros>VB Editor), find proper workbook in VBProjects window and delete proper userform.

combo

 

[Acydman]

Thats great but we have over 300 users here I need a group policy to stop it.

 

[combo]

Do you want to stop mailing excel files with flash? This could be rather hard without binary examination of the file.
Probably administrator could set office security level to high, this would be enough to lock flash (but also all macros).
If this is an internal problem, I would discuss it with someone from HR dept.

combo

 

[Acydman]

Hr are on the case, but they want it stopping. we've upped the security level but it didn't work it doesn't see it as a threat.

 

[combo]

Could you test/confirm the following:
1. is the flash object embedded in excel worksheet or is displayed on custom userform?
2. what happens when you disable macros (or switch to design mode)? Can you select and delete manually the flash object?
3. set the excel security level to high (tools>macro>security tab) and close excel. Open the mail with flash in excel file. Is the flash object enabled or disabled (see 2).

You can consider writing excel add-in that tests all oleobjects when opening file, for an active sheet the code could be:

Dim olo As OLEObject
For Each olo In ActiveSheet.OLEObjects
If TypeName(olo.Object) = "ShockwaveFlash" Then
    MsgBox "flash object found"
    ' proceed with file
End If
Next olo

You need to deal with application events.

combo

 

[manikm]

We have the same problem - flash games "smuggled" into our corporate network as Excel files.

There doesn't seem to be a "global" fix.

 

[manikm]

i have come up with a crude way to stop this:

the file C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx

controls flash - if you rename this file, or change the permission globally on it to only certain users (directors, admins etc only)

this will work.

 

[manikm]

to add further - this can be done via AD \ GPO.

create an OU in AD, called deny shockwave or something, then put the computers into this OU.

create and link a GPO to this OU with this criteria:

COMPUTER CONFIGURATION\WINDOWS SETTINGS\SECURITY SETTINGS\FILE SYSTEM\ then add the C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx file to it and permission it how you like - apply, ok!

your laughing, and the staff are frowning!!!! ;o)

 

[Acydman]

Does this stop flash running in IE? we have to access some flash enabled web sites?

 

[manikm]

lol YES it stops all flash mate!!!!

depending on how u permission it.

we've allowed only IT Admins, and our Directors FLASH access through this method.

 

[manikm]

regarding flash in IE - we use a program called SURFCONTROL WEBFILTER - and only let IT admins and Directors access flash websites = this is why we've matched the Flash8.ocx file permissions to Surfcontrol's permissions.