Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Wednesday, March 23, 2016 8:44 PM
Hello,
We want to use the User-Agent field in the HTTP Request Header to allow us to make decisions as to who we allow into our web site. Many programs have their own User-Agent signature and I am looking for a list of User-Agent signatures used by Microsoft Office when those products need to call out to the web. i.e. with Microsoft Excel, when Excel calls a web site to import data.
Thanks,
Frank
All replies (3)
Thursday, March 24, 2016 8:14 AM
Hi Frank,
I haven't found any official reference for this, but you can have a look at the following link:
https://github.com/ua-parser/uap-core/issues/32
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Regards,
Steve Fan
TechNet Community Support
Please mark the reply as an answer if you find it is helpful.
If you have feedback for TechNet Support, contact [email protected].
Monday, March 28, 2016 1:23 PM
Thank Steve.
I had seen that web site before and it may partially answer the question, but it does not matches the User-Agent string I get when I do my own tests. Furthermore, I am sure there are probably dozens of these encompassing each Office product over the years.
i.e. User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; ms-office)
If anyone else have anything else that they can add, I would love to see it.
Thanks,
Frank
Thursday, March 23, 2017 2:38 AM
If the Word document is in "protected view" then when a user clicks on a link they first get a warning about the dangers of the internet, and then Word tries to retrieve the document. In this case, the user agent string DOES NOT identify that it's coming from Word or Office - at least not in any way I can tell.
Protected View User Agent String:
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.3; WOW64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; Tablet PC 2.0)
Unprotected View User Agent String: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.3; WOW64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; Tablet PC 2.0; ms-office)
You can see the "ms-office" part only arrives if the user has turned off protected view.
Since I can't force users to turn off protected view in a document (esp one they downloaded from the internet), I can't work out how to reliably tell if the "browser" is an older version of Internet Explorer or Microsoft Word.
Any ideas?
David