Group Policy allows you to disable certain UI elements within Office applications, which you might want to do in the case of the Information Rights Management feature built into Office 2003 and 2007.

I’m picking on IRM in this post about disabling UI elements, but you can disable all of the IRM features in Office by enabling a single policy: User Configuration / Policies / Administrative Templates / Microsoft Office 2007 system / Manage Restricted Permissions / Disable Information Rights Management User Interface

If you haven’t yet, or are not ever, planning to roll out Active Directory Rights Management Services you’ll want to remove these features from Office which would lead users to dialog boxes such as this one (not particularly ideal):

IRM-Dialog

To disable menu items in Office you’ll first need to know the control ID’s of those items. This means you’ll need to wade through the 23 spreadsheets including in the 2007 Office System Document: Lists of Control IDs to find the ID listed amongst thousands. Fortunately most of the IDs are the same across each of the Office applications.

So to hide the IRM features in Office 2007 Professional Plus, Enterprise and Ultimate, I need to add the following IDs to Group Policy:

Word Excel PowerPoint Outlook
7990 7990 7990 9925
7991 7991 7991 14954
10014 10014 10014 14955
31308 31308 16314 15831
16137      
31308      

These are the policy settings you’ll need to enable and add the IDs to:

  • User Configuration / Policies / Administrative Templates / Microsoft Office Excel 2007 / Disable Items in User Interface / Custom / Disable commands
  • User Configuration / Policies / Administrative Templates / Microsoft Office Outlook 2007 / Disable Items in User Interface / Custom / Disable command bar and menu items
  • User Configuration / Policies / Administrative Templates / Microsoft Office PowerPoint 2007 / Disable Items in User Interface / Custom / Disable commands
  • User Configuration / Policies / Administrative Templates / Microsoft Office Word 2007 / Disable Items in User Interface / Custom / Disable commands

Which then results in something like this:

Restrict-Permissions