What Groupshield On-Access Settings Work Best?

[duffman5000]

Wondering what groupshield settings others are using and whether they do the job?

Currently, we have "find all macros" and "delete all macros" set which certainly does the job, but seems a bit extreme to me since some macros are legit.

What have others found?

 

[AVChap]

You can use just the "find all macros" option. Should be able to discern whether it's viral or not. AVChap
... my $1 worth of advise, 2cents isn't enough due to inflation

 

[Dreadnort]

using find all macros and delete all macros is a bad mistake.

Just think what would happen if you have macros that you need in a word document that is sent through the exchange server.

you will lose all documents that have macros in them regardless if the have viruses or not.

It does what is says on the tin finds all and then deletes them...

best off not using this at all but instead use macro huristics.