Set Security Level in MS Access

This guide walks you through setting the security level in Microsoft Access, which controls whether database content with executable code (macros, VBA) runs automatically or only after your approval. You’ll learn how to adjust the Trust Center settings for both current and future databases, and how to handle the warnings that appear when you open a database from an untrusted location. No prior security configuration is needed, but you should have an Access database file (ACCDB or MDB) and know whether your organization uses Group Policy or standard user settings.

What You’ll Need

• Microsoft Access installed (2016, 2019, 2021, or Microsoft 365).
• Access to the database file you want to open or configure.
• Administrator rights on your computer if you need to change system-wide Trust Center settings.
• Knowledge of whether your organization enforces security policies via Group Policy (which may override local settings).

Step-by-Step

1. Open Access – Launch Microsoft Access. If you already have a database open, close it so you start from the startup screen.
2. Go to Trust Center – Click on the File tab (Backstage view), then select Options at the bottom of the left-hand menu.
3. Open Trust Center Settings – In the Access Options dialog, click Trust Center in the left pane, then click the Trust Center Settings… button on the right.
4. Select Macro Settings – In the Trust Center dialog, click Macro Settings in the left pane. Here you’ll see four options:
   • Disable all macros without notification – Blocks all macros silently.
   • Disable all macros with notification – Blocks macros but shows a security warning bar (default).
   • Disable all macros except digitally signed macros – Runs only macros signed by a trusted publisher.
   • Enable all macros – Runs all macros without warning (not recommended).

   Choose the option that matches your needs. Most users should keep the default Disable all macros with notification.

5. Set Trusted Locations (Optional) – To allow macros to run automatically from a specific folder, click Trusted Locations in the left pane. Click Add new location…, browse to the folder containing your database, and check Subfolders of this location are also trusted if needed. Click OK.
6. Apply Changes – Click OK in the Trust Center dialog, then click OK in the Access Options dialog to save your settings.
7. Restart Access – Close and reopen Access for the changes to take effect.
8. Test with Your Database – Open the database file. If you chose the notification option, a yellow bar appears below the ribbon. Click Enable Content to run macros for that session.

Common Mistakes

• Choosing “Enable all macros” permanently – This disables all security warnings and can expose your system to malicious code. Use it only for trusted databases, and even then, prefer a trusted location.
• Forgetting to add a trusted location – If you frequently work with databases from a specific folder, not adding it means you’ll see the warning every time.
• Changing settings while a database is open – Some settings apply only to new sessions; close all databases before changing Trust Center options.
• Assuming Group Policy doesn’t override – If your organization enforces security policies, your local changes may be ignored. Check with your IT department.

Tips

• Use digital signatures – If you create your own macros, sign them with a code-signing certificate and add the certificate to Trusted Publishers. This lets you keep macros disabled for unknown sources while running your own.
• Use trusted locations for known folders – Instead of enabling all macros, add the specific folder where you store reliable databases.
• Keep the notification enabled – The yellow bar is a good compromise: you see the warning but can decide to enable content when you trust the source.
• Check the “Message Bar” settings – In Trust Center, under Message Bar, ensure it’s set to Show the message bar so you see security warnings.

Troubleshooting

• Changes don’t stick – If your settings revert after restart, Group Policy may be enforcing a different value. Contact your system administrator.
• No security warning appears – The database might be in a trusted location, or macros are fully disabled without notification. Check your Macro Settings and Trusted Locations.
• “Enable Content” is grayed out – This can happen when the database is opened in a read-only mode or from a network location that is not trusted. Copy the file to a local folder and try again.
• Macros still don’t run after enabling – The macro might be disabled due to VBA project protection or the database might be in a “sandbox” mode. Open the VBA editor (Alt+F11) and check for compile errors.
• Trust Center Settings button is disabled – This occurs if you don’t have administrator rights. Log in with an admin account or ask IT to adjust settings.

Frequently Asked Questions

1. What is the default security level in Access?
The default is “Disable all macros with notification.” This shows a security warning bar but allows you to enable content manually.

2. How do I permanently allow macros for a specific database?
Add the database’s folder to Trusted Locations (File > Options > Trust Center > Trusted Locations). Then macros will run without prompts.

3. Can I set a different security level for each database?
Not directly. The Trust Center settings are global, but you can use trusted locations to treat different folders differently. Alternatively, you can digitally sign macros and trust specific publishers.

4. Is it safe to enable all macros?
Generally no, because macros can execute arbitrary code. Only do this if you are absolutely sure the database is from a trusted source and you need the functionality immediately.

5. Why do I see a security warning even after I set “Enable all macros”?
This can happen if the database is from the internet (Mark of the Web) or if your organization’s policy overrides your settings. Right-click the file, select Properties, and if there’s an “Unblock” checkbox, tick it.

6. How do I remove a trusted location?
Go to Trust Center > Trusted Locations, select the location, and click “Remove.” You can also uncheck “Allow trusted locations on my network” to disable network paths.

Related

• Bootstrap Accordion Plus/Minus Icon Toggle
• Prompt Compression: Measure Coding Agent Accuracy & Cost
• Prompt Injection Defense: Protect AI Agents