We had an exam requirement for many years for computer based exams to disable the spell check, thesaurus and grammar check facility and to remove the ability to re-enable it.
MS in their infinite wisdom created ADMX/ADM templates that give admins the ability to disable some of the proofing tools in a GPO. However this does not disable the ability to re-enable these options from the GUI. Also in the Word 2010 ADMX templates, MS have REMOVED the option to disable Spell Check!
I found a couple of articles which were very helpful and pretty much gave me the answer i needed. The articles were for Word 2007 so i have ported them to Word 2010.
If you need the 2013/2016 versions then please use the following article.
https://chronicbit.blogspot.co.uk/2018/01/disabling-proofing-tools-and-related.html
Resolution
We found the solution to this issue was something relatively straight forward.
Microsoft have published on TechNet, a list of user interface items that can be disabled using control ID's and virtual key codes. Link is below.
http://technet.microsoft.com/en-us/library/cc179143(office.14).aspx
We are going to use these codes and some other GPO options for Word 2010 to disable the key shortcuts, menu items and the options menu so the users cannot re-enable them.
This guide assumes that you have already downloaded and installed the Office 2010 ADMX templates, available here.
- To start with create a new GPO, call it Proofing Tools Disabled.
- The first thing that you need to do is decide how you want to link this GPO to the users. There are two options, link to the user accounts in an OU or link to a group of computers in an OU.
- If you are linking the GPO to a computers OU you need to enable the following group policy option, if not skip this step.
- User Group Policy Loopback processing mode = ENABLED - Merge
- Next we need to set the group policy options that disable the proofing tools. Locate the options below.
- Check Grammar with Spelling = Disabled
- Do Not Enable additional actions in the right-click menu = Enabled
- Autocorrect / Capitalize first letter of sentance = Disabled
- Autocorrect / Capitalize names of days = Disabled
- Autocorrect / Correct TWo INitial CApitals =Disabled
- Autocorrect / Correct accidental usage of cAPS LOCK key = Disabled
- Autocorrect / Correct keyboard setting = Disabled
- Autocorrect / Replace text as you type =Disabled
- Next because MS removed the option to disable Spell Check from the GPO, we need to use the registry. Create a GPP for the registry key below.
- Next we need to use the Disable items in user interface options to remove the parts of the GUI that allow the users to re-enable the options we have set. Locate the group policy setting below.
- 2566
- 15780
- 9056
- 6111
- 12842
- 14453
- 2815
- 3492
- 4025
- 3997
- 3958
- 790
- 2
- 3217
- 2349
- 329
- 3219
- 2469
- 2788
- 11323
- 7343
- 7387
- 118
- 254
- 79,12
- 118,16
- 118,4
COMPUTER CONFIGURATION > Policies > Administrative Templates > System > Group Policy
USER CONFIGURATION > Policies > Administrative Templates > System > Microsoft Word 2010 > Word Options > Proofing
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Office
Value Name = WordSpellingOptions
Value type = REG_DWORD
Value data = 0 (0=disabled, 5=enabled)
USER CONFIGURATION > Policies > Administrative Templates > System > Microsoft Word 2010 > Disable Items in User Interface > Custom
In Disable Shortcut Keys add the list below:
Lifesaver. Thanks for documenting this fully and sensibly.
ReplyDeleteGlad i could help! We struggled to find a working solution for some time.
ReplyDeleteJust to confirm for Step 5, registry is for HKEY_LOCAL_USER or CURRENT_USER?
ReplyDeleteYes sorry typo, it should indeed be HKEY_CURRENT_USER, there is NO HKEY_LOCAL_USER.
ReplyDeleteThanks Matt for the quick reply about the wrong key name. We are currently using ToggleProof from http://www.migee.com/2011/12/06/disable-grammar-spell-check-thesaurus-proofing-in-office-2010/.
ReplyDeleteWorks great except that Synonyms are still accessible (Right click - Synonyms). We tried editing this in registry but it breaks ToggleProof. Anyone who tried Matt's method as per above confirmed that this is disable? If yes we will move to this solution instead.
Thanks in advance.
Hiya mate, I've just checked and yes the Synonyms appears to be greyed out in the Right click menu in Word. Hope that helps!
ReplyDeleteYou have two separate lists of IDs for "Disable Commands". Was that intentional or should the second one be "disable shortcut keys"
ReplyDeleteHI Alex, Yes sorry another typo, pitfalls of copy/paste. It should indeed be "Shortcut Keys"
ReplyDeleteThis still doesn't remove the option to right click in a word document....select autocorrect options...and then enable the settings you want?
ReplyDeleteI'm not 100% sure what you mean. However the only entry point i have found that is still open is, when you start a sentence it "Auto-capitalizes" the word. Then if you hover the mouse over the lighting symbol appears and if you click it it show you the "Control AutoCorrect Options". From here you can reenable some auto correct stuff, however if you now UNTICK "Show AutoCorrect Options Button" then that entry point disappears.
ReplyDeleteA comment from a 'non-tech' person here.
ReplyDeleteJust imagine if Microsoft included a simple 'on/off' button in the tool bar which had the option right there to enable a password protection to turn the spell checker back on.
I guess we simple types don't understand the need for the current complexity.
Yes, we also found the access through Auto-capitalize, but once fixed on a user it's hard to replicate. There was a setting for "Auto-capitalize on tables" that was still on even though I'd turned it off in GPO, so that might be the leak. It'd be nice to know for sure if there is a GPO setting to lock it down though.
ReplyDeleteThere also is another access to proofing options through Language Preferences. You can turn that off by adding 22145 to the disabled commands.
Even though I couldn't find an exploitable hole in the translation options, they still seemed a little dodgy, so I also locked them down by disabling command 20574
This comment has been removed by the author.
ReplyDeleteWhat happens if the devices are off network and dont have any GPO's is there a way to disable for standalone machines?
ReplyDeletePreviouse to my last post can you use the local GPO policys?
ReplyDeleteYep, just use adm files, copy them to %systemroot%\PolicyDefinitions and you will have them in your local GPO.
DeleteThanks a lot....really great info.
ReplyDeleteI need to turn this on and off, so I have found all the registry settings needed instead of doing it with policyes.
This is the disable, the enable can easily be made with the above information.
[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\word\options\vpref]
"frungrammar_480_1"="0"
[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\word\options]
"nosmarttagrecognition"="1"
[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\word\options\assist]
"finitialcap_32_1"="0"
[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\word\options\assist]
"fcapdaynames_48_1"="0"
[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\word\options\assist]
"ftwoinitialcaps_24_1"="0"
[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\word\options\assist]
"fcapslock_40_1"="0"
[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\word\options\assist]
"fcorrectkeyboard_64_1"="0"
[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\word\options\assist]
"fcorrecttyping_16_1"="0"
[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\word\disabledcmdbaritemslist]
"TCID1"="2566"
"TCID2"="15780"
"TCID3"="9056"
"TCID4"="6111"
"TCID5"="12842"
"TCID6"="14453"
"TCID7"="2815"
"TCID8"="3492"
"TCID9"="4025"
"TCID10"="3997"
"TCID11"="3958"
"TCID12"="790"
"TCID13"="2"
"TCID14"="3217"
"TCID15"="2349"
"TCID16"="329"
"TCID17"="3219"
"TCID18"="2469"
"TCID19"="2788"
"TCID20"="11323"
"TCID21"="7343"
"TCID22"="7387"
[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\word\disabledshortcutkeyslist]
"KeyMod1"="118"
"KeyMod2"="254"
"KeyMod3"="79,12"
"KeyMod4"="118,16"
"KeyMod5"="118,4"
[HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Office ]
"WordSpellingOptions"=dword:00000000
In Office 2013, having implemented the above, in Review I still have an enabled Define button that allows download free dictionary with Microsoft ID.
ReplyDeleteDO you know how to break that?
Anyone has the registry files completed for office 2013? Would be handy..
ReplyDeleteI will be updating this post very soon for 2013/2016 office. Watch this space :)
Deletehttps://chronicbit.blogspot.co.uk/2018/01/disabling-proofing-tools-and-related.html
DeleteAnyone??
ReplyDeleteI will be updating this post very soon for 2013/2016 office. Watch this space :)
Deletehttps://chronicbit.blogspot.co.uk/2018/01/disabling-proofing-tools-and-related.html
DeleteCool and that i have a tremendous present: How Much Home Renovation Cost house renovation and design
ReplyDelete