1 2 Previous Next 17 Replies Latest reply on Feb 6, 2018 8:40 AM by RCruis

    Microsoft update KB4011614 breaks Goldmine Plus

    JBrook Rookie

      FYI - this morning we found that a recent Windows update, KB4011614 (Security Update for Microsoft Word 2010), breaks the merging function of the Goldmine Plus add-in in MS Word 2010. Within Word (File>Options>Add-ins), the Goldmine Plus add-in appears to be operational but it does not work, no matter which method is used to merge the contents of Goldmine fields into a Word template. We found that uninstalling MS update KB4011614 re-enabled Goldmine Plus without requiring a reboot. We are on Windows 7 running Goldmine Premium 2017.1.0.384. Of course, after you uninstall KB4101614, you'll have to hide it to prevent it from being installed again. Hopefully Goldmine will develop a new version of Goldmine Plus that will work with Microsoft's security patch.

        • 1. Re: Microsoft update KB4011614 breaks Goldmine Plus
          MDe Rookie

          Same happen to me for Word 2013, we found that a recent Windows update, KB4011590 (Security Update for Microsoft Word 2013), breaks the merging function of the Goldmine Plus add-in in MS Word 2013.

          • 2. Re: Microsoft update KB4011614 breaks Goldmine Plus
            DCastell Expert

            JNeighbors John Neighbors posted the following on this problem:

             

            Using this documentation as a reference: Merging a Word template against contacts will n... | Ivanti User Community

             

            ...within the last 15 minutes I just helped a client resolve this issue with one simple registry change, per PC.  We simply followed what was documented in this above documentation that said:

             

            Microsoft notes that

            '...Microsoft has released an update for Microsoft Office that provides enhanced security as a defense-in-depth measure. The update disables the Dynamic Update Exchange protocol (DDE) in all supported editions of Microsoft Word.

            Microsoft is continuing to investigate this issue and will update this advisory as further updates become available. If you are unable to install the update, or if you need to disable the DDE protocol in other Office applications such as Excel, see Microsoft Security Advisory 4053440. Note that the mitigations listed in the advisory will not disable DDE, but will disable auto-update for any linked fields, including DDE.

            If you need to change DDE functionality in Word after installing the update, follow these steps:

            In the Registry Editor navigate to \HKEY_CURRENT_USER\Software\Microsoft\Office\version\Word\Security >> AllowDDE(DWORD)

            Set the DWORD value based on your requirements as follows:

            AllowDDE(DWORD) = 0: To disable DDE. This is the default setting after you install the update.

            AllowDDE(DWORD) = 1: To allow DDE requests to an already running program, but prevent DDE requests that require another executable program to be launched.

            AllowDDE(DWORD) = 2: To fully allow DDE requests...'

             

            After making that one, simple registry change, they were then able to do their Word merges again.  We ended up creating 3 distinct *.REG files on a shared network drive, allowing any network users to apply this "fix" on any computers running Word 2007, Word 2010 OR Word 2013.

             

            Just thought I would share. Hope this feedback helps.

            1 of 1 people found this helpful
            • 3. Re: Microsoft update KB4011614 breaks Goldmine Plus
              JBrook Rookie

              Thanks very much for the information. We have reinstalled update

              KB4011614 and edited the registry as described, except that none of our

              Office 2010 machines had an "AllowDDE(DWORD)" entry. Looking up the

              Ivanti Community web page "Merging a Word template against contacts will

              not update any GoldMine fields" (the link in your email was dead) I

              found the section, "If you need to create a new registry entry", and

              edited accordingly. Much better than blocking the security update!

               

               

              Jamie Brooks

              IR Analyzers / Vector Mapping

              65 Lyman Dr

              Williston, VT 05495

              800-879-1964

              1 of 1 people found this helpful
              • 4. Re: Microsoft update KB4011614 breaks Goldmine Plus
                JBrook Rookie

                Thanks for the information, Michel. The following article describes how

                to edit the registry to allow the merge function of Goldmine Plus to

                work with MS update KB4011614 installed. We have reinstalled the update

                and applied this fix to our Office 2010 machines. Note the section that

                says, "If you need to create a new registry entry" - we had to do this

                on our machines.

                 

                 

                "Merging a Word template against contacts will not update any GoldMine

                fields" > https://community.ivanti.com/docs/DOC-62725

                 

                 

                 

                Jamie Brooks

                IR Analyzers / Vector Mapping

                65 Lyman Dr

                Williston, VT 05495

                800-879-1964

                1 of 1 people found this helpful
                • 5. Re: Microsoft update KB4011614 breaks Goldmine Plus
                  JRehm Apprentice

                  My question would be when are the links going to be revamped to do away with the need for DDE?  These security updates aren't issued just to waste time and simply going in and enabling DDE is not the long term solution.  It leaves customers unnecessarily vulnerable.

                  • 6. Re: Microsoft update KB4011614 breaks Goldmine Plus
                    John Neighbors Expert

                    Great question!  Am anxious to see the answer as well.

                    • 7. Re: Microsoft update KB4011614 breaks Goldmine Plus
                      JRehm Apprentice

                      A question I doubt we'll see an answer to anytime soon.

                      • 8. Re: Microsoft update KB4011614 breaks Goldmine Plus
                        RCruis Apprentice

                        Anyone know if this affects Outlook as well as Word/Excel? Im trying to sort an issue in Outlook for someone and I cant decide if its the cause or not! Ive tried a similar fix (putting the entry in \Outlook\Security but it doesnt seem to have sorted it.

                        • 9. Re: Microsoft update KB4011614 breaks Goldmine Plus
                          RCruis Apprentice

                          Its proving to be a fairly significant issue so it may be that they have to address it sooner rather than later.

                          • 10. Re: Microsoft update KB4011614 breaks Goldmine Plus
                            JRehm Apprentice

                            The DDE issue should not affect Outlook or the link to Outlook.  That freaking Outlook link is such a mess (old and new one) I cringe when someone mentions wanting it.

                            1 of 1 people found this helpful
                            • 11. Re: Microsoft update KB4011614 breaks Goldmine Plus
                              RCruis Apprentice

                              Tell me about it! Unfortunately the email center in GoldMine is no better, so its still a popular request to use the Outlook link...

                              • 12. Re: Microsoft update KB4011614 breaks Goldmine Plus
                                JRehm Apprentice

                                Don't even get me started...

                                • 13. Re: Microsoft update KB4011614 breaks Goldmine Plus
                                  JBrook Rookie

                                  Recently, two Windows 7/MS Office 2010 machines that we had fixed using the described registry edit stopped merging into Word again. There was no change to the add-in configuration in MS Word - everything looked fine. We discovered, thanks to support from a Goldmine VAR, that the "AllowDDE(DWORD) = 2" registry entries we had made in HKEY_CURRENT_USER\Software\Microsoft\Office\version\Word\Security were no longer there. Re-entering the entries fixed the problem for both computers. Don't know how the entries were deleted but it's something to keep in mind.

                                  • 14. Re: Microsoft update KB4011614 breaks Goldmine Plus
                                    RCruis Apprentice

                                    Were the same users logged in as before? Its quite annoying a fix as it needs to be made for every user on every machine (or at least every user who needs to use the machine).

                                     

                                    Unless there is a way around this? We are finding that it is quite a challenge for some of our customers to fix this issue, especially those who would have registry editing locked down for users.

                                    1 2 Previous Next