OL97: Outlook Custom Form Passwords Are Not Secure (288551)

SUMMARY

You can assign a password to an Outlook custom form to prevent users from accessing the form in Design mode, but the password is not secure because it can be retrieved using the Outlook object model.

MORE INFORMATION

In all versions of Outlook, the object model exposes a Password property on the FormDescription object. This property contains the text of the password that is assigned to a form. In addition, you can access the text of the Microsoft Visual Basic Scripting Edition (VBScript) code in a form by using the ScriptText property.

Outlook custom form passwords should be considered a deterrent so that typical end users cannot gain access to the design of a form. However, these form passwords cannot guarantee that users will not be able to access information about a form's design.

REFERENCES

For additional information about creating solutions with Microsoft Outlook, click the article numbers below to view the articles in the Microsoft Knowledge Base:

166368 OL97: Resources for Custom Forms and Programming

170783 OL97: Questions About Customizing or Programming Outlook