Disable Office application macros and block macro-enabled Office files to prevent cyberattacks

This document provides step-by-step guidance to reduce risk from macro-enabled Office files by configuring policies in Microsoft 365 (config.office.com), Windows Group Policy, and ThreatLocker. It recommends enabling “Block macros from running in Office files from the internet” and setting VBA Macro Notification policies per Office app, while clarifying policy precedence (cloud/Group Policy over Trust Center) to ensure consistent enforcement across the organization.