Word Macro viruses disable virus protection as part of their attack.
To disable their ability to do this, first turn on the virus protection. Run regedit /s macrovirus.reg, where macrovirus.reg contains:
Then use Regedt32 / Security / Permissions to grant Read access to the Everyone group, Full Control to SYSTEM, and Full Control to Administrators on the Word/Options and Word/Security keys.
NOTE: If you logon as a member of the Administrators group, grant it Read.
If you granted Read to Administrators, running these tools under the Schedule Service (AT command),
when it is set to use the default LocalSystem account, will allow you to make subsequent changes.