Microsoft has yesterday released Service Pack 2 (SP2) for Microsoft Office System de 2007, with lots of optimizations on stability, performance and interoperability.
These tweaks include:
� Performance optimizations on Microsoft Office Outlook.
� Additional support to file formats ODF, PDF e XPS.
The SP2 optimizations will benefit server and client applications highlighting:
Office Desktop
� Outlook 2007 SP2 is 26% faster than it’s ancestor in box of usual tasks and even more faster (35%) with large mail boxes;
� Capacity to ungroup SmartArt� graphics (and, as result, capacity to animate them on PowerPoint);
� A tool that allows to uninstall Office Service Packs.
Servers – performance and availability
� Microsoft Office SharePoint Server 2007 Service Pack 2 improves a series of questions like security level, performance and stability on the ECM areas, Search, Excel Services and Form Services;
� Together with Office 2007 client, with Service Pack 2 it’s possible to record and open files in ODF formats directly in Sharepoint.
� Finally, Service Pack 2 will offer different tools for developers which become easier the developing process for Office.
Knowledge Base article http://support.microsoft.com/kb/968170 includes a complete list of updates.
The developing team elements of Office offer a vast of interesting and relevant information on the following blogs:
� Sustained Engineering blog – A detailed view about SP2
� Office Interoperability blog, Doug Mahugh – The additional formats supported by Office.
� Microsoft on the Issues blog – Discussion on format options of files.
� Gray Matter, Gray Knowlton – The perspective for community and development.
Where can you get Service Pack 2?
SP2 can be downloaded from http://www.microsoft.com/downloads/details.aspx?FamilyID=b444bf18-79ea-46c6-8a81-9db49b4ab6e5, which will also be available on Microsoft Update maximum term of 3 months.
Some of these are a mystery to me, and I haven’t had a chance to get into the source to look at them, or have and am in the process of figuring out their use. Use these at your own risk. Anywhere that I have marked that they are available in Office 11, obviously you will need to make adjustments to the Key location (change 12.0 to 11.0) and GPO location.
Disable all IRM in Office client
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
DWORD:Disable
Value:
0 – No functionality impacted by this regkey
1 – All IRM functionality is removed; IRM is disabled
Description:
This key can be used to disable all IRM functionality in the Office client. All IRM UI hooks are removed.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:Yes
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsDisable Information Rights Management User Interface
Disable creation of IRM content
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
DWORD:DisableCreation
Value:
If DisableCreation is non-zero, then an Enterprise Install will act just like a Standard install. Users cannot create IRM content or edit the rights on a doc, but they can consume previously created content.
Description:
This regkey makes a Enterprise Professional version of Office behavior like a Standard copy. In this state, users can consume rights managed content, but cannot create new managed content or edit the permissions on existing content.
Exists in Office 11:No
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsPrevent users from changing permissions on rights managed content.
Set whether a HTML version of doc is embedded into IRM content
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
DWORD:IncludeHTML
Value:
1 = Include HTML stream
0 = Do not include HTML stream
Description:
This regkey determines whether an HTML representation of the rights managed content is included in in Word, Excel, and PowerPoint rights managed documents. If the HTML stream is included, the file can then be viewed by the Rights Management Add-on for IE
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:Yes
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsAllow Users With Earlier Version of Office to Read With Browsers
Notes:
In Office 11, this regkey simply sets the default value for the "Allow users with earlier version of Office . . ." checkbox. In Office 12, that checkbox has been removed. This is the only way to determine if the HTML stream is included. By default, Office 12 sets this regkey to 0.
Select whether to encrypt document properties for IRM content
Location:HKCUSoftwareMicrosoftOffice12.0CommonSecurity
DWORD:DRMEncryptProperty
Value:
When this DWORD is set to 1, the metadata is encrypted. When set to 0, the metadata is stored in clear text. The default value is 0.
Description:
For Office "12′s" new Office Open XML file formats (e.g. doxc, xlxx, pptx) users will have the ability to decide whether to encrypt the Office metadata stored inside an IRM protected "Metro" file. They can either encrypt all Office metadata (including hyperlink references) or leave it in the clear so other applications can access the data. Users make this choice by setting a registry key. Corporate IT departments can automatically set-up a default option within their organization using this registry setting.
Note that the choice is not granular: users either encrypt the entire metadata package or none of it. In addition, this registry setting does not determine whether other, non-Office client metadata storages – such as the special storage SharePoint creates – are encrypted. Finally, this choice does not apply to the Office 2003 or other previous file formats. Office "12" will handle these formats in the same manner as Office 2003.
Exists in Office 11:No
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Security SettingsProtecting document metadata for rights managed Office Open XML Files.
Notes:
Only applies to Open XML Documents
Because all metadata properties are encrypted, SharePoint will be unable to promote/demote metadata from IRM documents created with this regkey set. Not only does this make the documents harder to find, it also leads to several issues. As such, if you want to set this regkey you should a) not be using SharePoint or b) use SharePoint, but only upload IRM documents to an IRM-enabled SharePoint document library (in which case, WSS can access the encrypted properties and will promote/demote them).
Set RMS Licensing URL
Location:HKLMSoftwareMicrosoftOffice12.0CommonDRM
String:CorpLicenseServer
Value:URL of the licensing server
Description:
This setting allows the administrator to override the location of the Windows Rights Management Server specified in the Active Directory.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
Notes:
Generally, this key is not used. The AD should specify the RMS server.
Set downlevel text for IRM email messages
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
String:DownlevelText
Value:The text that appears in the wrapper email.
Description:
Using this setting, users can set the text of the "wrapper" email message that is sent with their IRM email. This is the message that will appear when users via the IRM email in a non-IRM aware client. By default, this regkey is not present and the default message is sent: If you are not running an e-mail application that supports messages with restricted permission, such as Microsoft Office Outlook 2003 or 2007, you can view this message by downloading the Rights Management Add-on for Microsoft Internet Explorer from http://r.office.microsoft.com/r/rlidRestrictedPermissionViewer?clid=1033." The CLID in the hyperlink is localized to the default language of the sender.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:Yes
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsMessage displayed to users who cannot view a rights-managed e-mail
Set downlevel template path for IRM documents
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
String:DownlevelTemplatePath
Value: The path to a directory that stores templates. Templates are just normal Office documents.
Description:
For rights managed files, the actual encrypted data is stored inside a unencrypted "wrapper" file. This wrapper file can inform someone who is not using Office 2003 or later that they need to view the file in an IRM aware application.This key specifies the location of the template directory.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:Yes
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsURL for location of document templates displayed when applications do not recognize rights-managed documents.
Set path to RMS templates
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
String:AdminTemplatePath
Value:The path to the RMS templates. All templates should be stored in the same directory.
Description:
This string contains the path to the folder containing RMS Permission Templates.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:Yes
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsSpecify Permission Policy Path
Set RMS certification URL
Location:HKLMSoftwareMicrosoftOffice12.0CommonDRM
String:CorpCertificationServer
Value:URL to corporate certification server.
Description:
This setting allows the administrator to override the location of the Windows Rights Management Server specified in the AD for certification
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
GPO Path and Name:
Notes:
Generally, the AD should be used to specify the RMS server.
Disable Microsoft Passport Server for content with restricted permission
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
DWORD:DisablePassportCertification
Value:
0 – No functionality impacted by this regkey
1 – Disable passport
Description:
This key disables passport as a valid auth choice
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:Yes
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsDisable Microsoft Passport service for content with restricted permission
Notes:
Additional permissions request URL
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
String:RequestPermissionURL
Value:
The URL (most likely amailto:someone@company.com) of the person who can grant additional permissions.
Description:
This string value contains the default value for the "Users can request additional permissions from" control
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:Yes
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsAdditional Permissions Request URL
Always require users to connect to verify permission
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
DWORD:RequireConnection
Value:
1 = box is checked by default and a connection is required.
0 = box is unchecked, users do not need a connection
Description:
The key determines the default value for the "Require a connection to verify a user’s permission" checkbox.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:Yes
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsAlways require users to connect to verify permissions
Toggle Request Additional Permissions
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
DWORD:RequestPermission
Value:
1 = The box will be checked.
0 = The box is unchecked.
Description:
This toggles the default value of the "Users can request additional permissions from" checkbox.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
Toggle whether Outlook will automatically acquire a EUL when syncing messages
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
DWORD:DoNotAcquireDRMLicenseOnSync
Value:
If the value is set to one, Outlook will not try to acquire licenses during the message synchronization.
If set to zero, the license will be automatically acquired.
Description:
When Outlook downloads an IRM email, it can automatically acquire an EUL for the content.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
Toggle whether groups can be added to an issuance license for IRM documents
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
DWORD:NeverAllowDLs
Value:
0 = Allow DLs
1 = Disable DLs
Description:
If this key is set, users will not be able to add groups as consumers of IRM content
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:Yes
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsNever allow users to specify groups when restricting permission for documents
Set RMS certification URL for Passport
Location:HKLMSoftwareMicrosoftOffice12.0CommonDRM
String:CloudCertificationServer
Value:
URL to custom cloud certification server
Description:
This setting allows the administrator to override the location of the Passport server for certification
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
Set RMS Licensing URL for Passport
Location:HKLMSoftwareMicrosoftOffice12.0CommonDRM
String:CloudLicenseServer
Value:
URL of the licensing server
Description:
This setting allows the administrator to override the location of the Passport server for licensing
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
Alerts
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
String:Alerts
Value:??
Description:
It’s a mystery.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
DefaultUser
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
String:DefaultUser
Value:??
Description:
I’m sure that this is used if you have multiple user accounts, and want one to take precedence over another.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
CachedCorpLicenseServer
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
String:CachedCorpLicenseServer
Value:URL to your licensing server
Description:
This reg entry exists, but does not need to be set by users.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
PermissionDialogSize
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
??:PermissionDialogSize
Value:??
Description:
Another mystery, but as the name indicates probably used to set the size of the permission dialog that pops up.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
ActivationServer
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
String:ActivationServer
Value:NOT NEEDED /w SP1 +
Description:
This reg entry exists, but does not need to be set by users.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
Notes:
With RMS SP1, we no longer need to contact a server to activate the machine.
LicenseServerRedirection
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRMLicenseServerRedirection
String:http://url.to.old.licensing.server/licensing
Value:http://url.to.new.licensing.server/licensing
Description:
It has been said that you can fix the sins of the past with this key, essentially overriding the PL of your old content to point to a new licensing server.
UPDATE: 01/22/2007. I actually tested this one out and it works fine. Make sure that you export the publishing cert from your old licensing server, into the new licensing server, via the RMS Admin Trust Policies UI.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
Decommission
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRMDecommission
String:http://url.to.licensing.server/_wmcs/licensing
Value:http://url.to.decommission.server/_wmcs/decommission
Description:
This key exists, but does not need to be set by users.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
URL to RMS Client
Location:HKLMSoftwareMicrosoftOffice12.0CommonDRM
String:DRMPostSetupURL
Value:URL of RMS client
Description:
This reg entry points to the URL where the RMS client bits can be found. If Office detects that the RMS client is not installed, it will point the user to this URL
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsURL where users can download the Windows Rights Management Services client.
Notes:
This is typically used by customers who do not want downloads from outside their corporate firewall
Auto Expand DLs in Permission Dialog
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRMAutoExpandDLs
DWORD:AutoExpandDLsEnable
Value:
0 = Do not expand DLs, disabled
1 = Expand DLs in Permissions dialog
Description:
This reg key toggles whether DL are auto expanded when entered in the Permissions dialog
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:Yes
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsAlways expand groups in Office when restricting permissions for documents
AdsSearchPrefTimeLimitSecs
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRMAutoExpandDLs
DWORD:AdsSearchPrefTimeLimitSecs
Value:??
Description:
This reg entry exists, but does not need to be set by users. I suspect you can set the timeout for SCP discovery with this.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
AdsSearchPrefTimeOutSecs
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRMAutoExpandDLs
DWORD:AdsSearchPrefTimeOutSecs
Value:??
Description:
See above.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:Yes
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsActive Directory timeout for querying one entry for group expansion
DisableCertificateValidation
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
DWORD:DisableCertificateValidation
Value:
0 – Off
1 – On
Description:
Still looking for an answer for this one.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
DisableRepair
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
DWORD:DisableRepair
Value:
0 = Repair works normally
1 = Repair is disabled
Description:
Office can detect invalid configuration of the RMS environment and attempt to repair the problem. This key can be used to disable the repair process
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:Yes
Can Be Set by GPO in Office 12:Yes
GPO Path and Name:
User ConfigurationMicrosoft Office 2007Manage Restricted PermissionsDo not allow users to upgrade Information Rights Management configuration
Notes:
There is a disconnect between the description here and what GP says the reg key does. This key is legacy and is not used anymore.
DoNotUseOutlookByDefault
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRM
DWORD:DoNotUseOutlookByDefault
Value:
0 = Outlook is used
1 = Outlook is not used
Description:
The permissions dialog uses Outlook to validate email addresses entered in that dialog. This causes an instance of Outlook to be started when restricting permissions. Users can disable this option using this key
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
Reset PONT dialog for acquiring license
Location:HKCUSoftwareMicrosoftOffice12.0CommonDRMLicenseServers
Key/Hive:LicenseServers
Value:
This key contains DWORD values. The name of the DWORD should be set to the server URL. If the value of the DWORD is 1, then Office will not prompt to acquire a license (it will just get it). If the value is zero or there is no reg entry for that server, Office will prompt for a license
Description:
This registry key contains DWORD values that have the name of a license server. If the value is set to 1 then the user will not see a message telling them that they need to acquire a license. If the value is 0 then the user will see the message. For example, if `http://contoso/_wmcs/licensing = 1′ was one of the values then a user that was attempting to acquire a license from that server would not be prompted.
Exists in Office 11:Yes
Exists in Office 12:Yes
Can Be Set by GPO in Office 11:No
Can Be Set by GPO in Office 12:No
Who knows the one of the main steps till the application’s publish is the sequencing phase? In simple words, sequencing is the taks of monitoring, capturing and create the project of one app so that the same can be distributed in a virtualized way by Softgrid. What I’m about to post today is how to sequence Office 2007 with some details for the pt-PT version. These are the steps and best practices to do it.
Step 1: Be aware of all the possible problems that you can face distributing virtualized apps to desktops or servers with Operating System with a different language pack.
Article: http://support.microsoft.com/kb/935684/en-us
Step 2: Be aware of the best practices of sequencing. They must be applied for any app, not only for Office 2007.
Article: http://support.microsoft.com/kb/932137/en-us
Step 3: Know how to customize the instalation of Office 2007 so that the sequencing occurs with success.
Article: http://technet2.microsoft.com/Office/en-us/library/8faae8a0-a12c-4f7b-839c-24a66a531bb51033.mspx?mfr=true
Passo 4: See how you should procede during the sequencing of Office 2007.
Article: http://support.microsoft.com/kb/939796/en-us
Probably for the US-English version, those steps should be enough.
But for the pt-PT version of Office 2007, we have to do some adjustments on the OSD archives for each product that may present some problems in their publishment. How to do that?
Step A: If some Office 2007 app was not correctly published (the icon didn’t appear in the desktop or start menu), check the archive SFTLOG.TXT (Ex. %ProgramFiles%SoftricitySoftgrid).
Step B: Look for flaws in the construction of the OSD (XML Parsing Failure) of the app that was not published with success. The error code is useful to find a solution.
Step C: The flaws caused but invalid characters in the OSD archive or not supporting codification of the archive can be adjusted only by the edition of the OSD archive of the app with problems.
Articles: KB938625, KB930709 e KB931245.
Note: For the error 00E01005-00000016, try the procedure KB931245 before any other.
Please let me know if this was useful for you.