Security Policy Errors

How to Fix Office Macros Blocked on a NAS Drive in Windows 11

Maira Mehtab Sep 20, 2026 869 views

Question details

Microsoft 365 macros stored on a Network Attached Storage (NAS) drive are prevented from running due to Windows 11 security settings, and users are unable to add the NAS path as a trusted location.

Product: Microsoft 365
Device & OS: Windows 11
Scenario: A user is trying to execute VBA macros from Office files hosted on a shared NAS drive over a network.
Observed behavior: Macros are blocked from running despite Trust Center macro and VBA settings being enabled, because the system rejects adding the NAS path as a Trusted Location.

Before you start

Verify your exact network path format (e.g., a mapped drive letter or a UNC path) and determine whether you are accessing the files via SMB, HTTP, or another protocol before adjusting your security settings.

Solution 1Recommended

Allow Trusted Locations on Your Network

Office disables trusting network locations by default for security. You must explicitly allow network paths in the Trust Center before you can whitelist your NAS.

By default, the Microsoft Office Trust Center restricts adding any network share or NAS drive to the Trusted Locations list to prevent malicious scripts from running over a network.

Open Trust Center Settings

Launch your Office application (like Word or Excel), click 'File', select 'Options', and navigate to the 'Trust Center' tab. Click the 'Trust Center Settings' button.

Allow Network Locations

Select 'Trusted Locations' from the left pane. Check the box at the bottom labeled 'Allow Trusted Locations on my network (not recommended)'.

Add the NAS Path

Click 'Add new location', enter your NAS drive's UNC path or mapped IP address (e.g., \\NAS-Server\Shared), check 'Subfolders of this location are also trusted', and click 'OK'.

Network Path Format: If a mapped drive letter (like Z:\) is not accepted, try using the direct UNC path instead.

Solution 2

Add the NAS Drive to the Local Intranet Zone

Windows 11 may treat your NAS drive as an external internet location, applying Mark of the Web (MOTW) to your files. Adding it to the Local Intranet zone clears this restriction.

Solution 3

Request Specialized Troubleshooting for VBA and NAS

If standard Trust Center and Intranet settings fail, network policies might require specialized scripting or protocol adjustments.

Free Microsoft Office alternative

Switch to WPS Office for a Streamlined Experience

If Microsoft 365 security updates and Mark of the Web (MOTW) policies are persistently blocking your local network workflows, consider trying WPS Office. It provides a lightweight, intuitive, and highly compatible alternative for handling spreadsheets and complex documents without strict local network limitations.

1. Download the Software: Visit the official WPS Office website and download the free installation package for Windows.
2. Install WPS Office: Run the installer and follow the quick setup wizard to complete the installation.
3. Open Your Network Files: Navigate to your NAS drive and open your documents directly in WPS Office to resume your workflow.

Excellent format compatibility with Microsoft Office files (.xlsx, .xlsm, .docx, .pptx).Lightweight installation and fast processing speeds, even when opening files hosted on a NAS drive.Familiar tabbed user interface ensuring a seamless migration with zero learning curve.Free to use, providing professional-grade office tools without expensive subscriptions.

microsoft office alternative - wps office

Frequently Asked Questions

Why did my NAS macros suddenly stop working in Windows 11?

Microsoft regularly updates its security policies to block macros from files originating from the internet or untrusted network zones by default. This feature, known as Mark of the Web (MOTW), often affects NAS drives if Windows 11 classifies your local network storage as an external internet zone.

Why is the 'Add new location' button greyed out for my NAS drive in the Trust Center?

By default, Office disables the ability to trust network paths for security reasons. You must first check the 'Allow Trusted Locations on my network (not recommended)' option at the bottom of the Trusted Locations menu before you are permitted to add a NAS path.

Does it matter if I use an IP address or a mapped drive letter for my network storage?

Yes, Microsoft Office and Windows Security sometimes treat mapped drive letters (e.g., Z:\) and explicit UNC paths (e.g., \\192.168.1.10\share) differently. If one format is blocked by the Trust Center, try adding the other format to your Trusted Locations and Local Intranet zone.

Microsoft Office Security Issues