Just raising awareness of this excellent new method to block one of today's major means of downloading ransomware into a network....
Preventing PowerShell from running via Office https://www.symantec.com/connect/articles/preventing-powershell-running-office
Thank you Mick. That's a very helpful article.!!