CSA 5.2.0225, Rule 576, and saving attachments in Outlook 2003

We're in the process of migrating from 4.5.6139 to 5.2.0225; thus far, the migration is going extremely well - with one bizarre issue haunting my sleep.
I started seeing this behavior about 2 weeks ago, on machines that (so far as I can determine) have not had any changes made (ie, the latest round of Windows Updates have not been applied, the machines are tightly controlled, no software has been installed). It also impacts some machines running CSA 4.5.6139.
However, it does not impact ALL machines - only we have a couple machines that are not impacted.
Versions of Outlook include 2000 and 2003; all machines are Windows XP Sp2, current with patches with the expcetion of August 2007 batch.
Scenario: user opens an e-mail, and right clicks on an attachment to save it. When the common dialog control for saving as comes up, the "My Computer" icon is missing - replaced with the "blank" generic Windows icon, and CSA triggers rule 576, saying that Outlook.Exe attempted to access Explorer.Exe, and was denied.
Additionally, the machine might display more icons as blank: for example, one of our admins has the ASA ASDM Launcher on his desktop, and that shows up with a blank icon in the save as dialog, and Rule 576 is triggered with "Outlook attempted to access ADSM.exe and was denied."
In attempting to get a handle on this issue, I have put the entire "Untrusted Classification Content Module" into test mode, reset the agent on a test machine, and still rule 576 is triggered - which strikes me as bizarre, if I understand the triggering conditions correctly.
Anybody have any thoughts?
This is not a showstopper, but I'm concerned because I don't understand why this rule has started to get triggered when we have made no change to our environment.
TIA.

Tom,
Not sure I quite understand.
I'm looking at the MC, and see that "Untrusted Content Classification Module" is associated with the "Application Classification" poilcy, which is included as part of the "All Windows" group.
I was operating under the assumption that, since it is included in this policy as part of "All Windows", this was the module responsible for doing the content classification. Indeed, if I turn on logging for some of the rules, it's pretty active - and pretty active in setting e-mail content as "untrusted".
Rule 576, the one firing, is (according to the description), blocking access to @dynamic - dynamically quarantined files.
My thought was that I could create exceptions so that common stuff like "excel.exe" would not be tossed into @dynamic, and hence, Outlook could access Excel.Exe, and display the appropriate icon for spreadsheets.
But then I get all confoozled by the fact that I have some machines, with the same OS/SP/patch level, same AntiVirus, and same group membership in CSA, which do not exhibit this problem.
(If you read closely, there's a question buried in all the above. I just can't quite get it out due to my ignorance with how CSA is working it's magic.)
Thanks for taking the time to help with this.
Bob

Similar Messages

TS1334 Saving attachments in Outlook for Mac

I cannot save email attachments in Outlook for Mac because it says I do not have permission to save it. How do you find the file in Finder?

Trying to save to my computer. i did discover i can right click on the unopened link to the attachment, which is kind of annoying since sometimes i can save an opened attachment and sometimes i don't have permission to save. I'm not following you with the Attachments>Save command. I use Outlook. Where is that command? Thanks.

Backup and restore files in outlook 2003

HI,
I want to take a backup of files in outlook 2003 - and restore back -
Appreciate all your help
thanks

The following resources will help you:
Using the Microsoft Outlook Personal Folders Backup tool
How to manage .pst files in Outlook 2007, in Outlook 2003, and in Outlook 2002
Backup/Restore Email from Outlook 2003

Synchronisation prob between outlook 2003 and noki...

Windows xp sp2
Latest version of pc suite is installed (just checked via the updater)
Connection method: Bluetooth
Synchronisation between my contacts and calendar entries in outlook 2003 SP2 and my Nokia n95 8gb was working perfectly until today.
By perfectly what I mean is that the following happens: if I remove a contact or calendar entry from outlook, it is removed from phone when I sync. Also, if a calendar entry is made on phone or contact amended this was then reflected correctly in outlook on next sync.
Now what happens is the following:
I removed a number of calendar entries from outlook and instead of removing these from phone when i synced it kept them on phone and also placed them back in outlook again.
I also note that when sync is running that it appears to be running through all calendar entries and re syncing rather than just amended ones.
I only make use of calendar and contacts nothing else between phone and outlook
This is so weird as i have made no changes to settings on phone or pc!
Message Edited by mikeashworth on 14-May-2008 07:15 PM

hi, i have been running my sync as follows.
plug phone into usb cable. prompted for pc suite connection. I accept.
PC suite has the word "synchronise" available for clicking. I click on that and synchronise takes place.
this is how I've always sync'd my phone and outlook.
From the moment I installed software a cpl of months ago have been to update in both directions for calendar and contacts (those are only things I sync). This was working perfectly until one day it decided to go haywire and add back entries to my outlook calendar which i'd previously deleted.
i'm currently getting round this by only updating items in outlook and checking the option to remove all items from phone before sending them all, as new, to the phone again from the PC.
I dont want this to be the way I have to do this though, I want to go back to the old method whereby i could quite happily add an entry in either outlook or phone calendar/contacts and the sync will work correctly. :-(

CSA User authentication auditing rule and Policy conflicts

Hi there
We have CSA 5.2 in our environment and i created a custom policy and added the 'user authentication auditing' rule and enabled auditing failure events on windows XP machine but i dont see any failure attempts in the CSA MC event log even though i tried to logon on with invalid passwords.What could be the reason for this.
Secondly i was wondering what happens when i apply two policies, Are the policy settings added and applied to the group or one policy gets priority over the other
Thanks for your anwers
Ahmed

Have you checked the security event logs on the machines in question? If there are no events there, CSA cannot report them.
That's where CSA gets the info and by default, there is no account auditing in Windows XP.
You have to enable it either via group or local policy.
Tom

Update XDP datasets after fillong and saving static forms

Hi all,
I've got many static XFA forms, which does not behave the same way after filling-in and saving in Acrobat. Mosto of them updates the XDP datasets entry inside the XFA, but some of them does not. The result is, that after extracting the XDP from the pdf Form, the datasets contains just the default values and not the filled-in values.
Are there any rules for updating the datasets entry shen saving filled form?
Thanks for any help
Jozef

Hi all,
I've got many static XFA forms, which does not behave the same way after filling-in and saving in Acrobat. Mosto of them updates the XDP datasets entry inside the XFA, but some of them does not. The result is, that after extracting the XDP from the pdf Form, the datasets contains just the default values and not the filled-in values.
Are there any rules for updating the datasets entry shen saving filled form?
Thanks for any help
Jozef

I need help to find and open a job app that I exported, was able to fill out and sign and saved and now can't open it? What did I do wrong?

I need help to find and open a job app that I exported, was able to fill out and sign and saved and now can't open it? What did I do wrong?

What file format did you export it to?

Saving NSDatePicker to a string and saving that to NSUserDefaults...

Saving NSDatePicker to a string and saving that to NSUserDefaults I have it saved to a string then I have code that should save it to NSUSerDefaults so that when the program starts it is saved as the string not null. Here is the code [CODE]#import "MainView.h"
#import "DateView.h"
@implementation MainView
-(void)awakeFromNib
[self removeFromSuperview];
[self addSubview:dateView];
[dateView setdateandtime];
[dateView permsavedattime];
@end [/CODE] [CODE]#import "DateView.h"
#include "MainView.h"//Use #import this is to see if #include Works
@implementation DateView
-(IBAction)showuserdefaultdate
[self userdefaultdate];
//dateoutput.text =tddate;
-(void)permsavedattime
tddate=[prefs stringForKey:@"testing"];
tdtime=[prefs stringForKey:@"timetesting"];
dateoutput.text =[[NSString alloc] initWithFormat:@"%@",tddate];
-(void)userdefaultdate
prefs =[NSUserDefaults standardUserDefaults];
[prefs setInteger:tddate forKey:@"testing"];
[prefs setObject:tdtime forKey:@"timetesting"];
-(void)setdateandtime
[Today setDate:[NSDate date] animated:YES];
//formatting date style
dateformatter = [ [ NSDateFormatter alloc ] init ];
[ dateformatter setDateStyle:NSDateFormatterLongStyle];
[ dateformatter setTimeStyle:NSDateFormatterNoStyle ];//makes it so the time is not included
//[ formatter setTimeStyle:NSDateFormatterLongStyle ];//set to anystyle besides
//NoStyle if you dont want time included.
[Time setDate:[NSDate date] animated:YES];
//formatting date style
timeformatter = [ [ NSDateFormatter alloc ] init ];
[ timeformatter setDateStyle:NSDateFormatterNoStyle];//makes it so it doesn't get the date
[ timeformatter setTimeStyle:NSDateFormatterShortStyle];//makes it so the time is just hour and minute and A.M. or P.M.
//[ formatter setTimeStyle:NSDateFormatterLongStyle ];//set to anystyle besides
//NoStyle if you dont want time included.
-(IBAction)recieveDate
tddate= [dateformatter stringFromDate:Today.date];//Asigning the date to the string
dateoutput.text =tddate;
-(IBAction)recievetime
tdtime= [timeformatter stringFromDate:Time.date];//Asigning the date to the string
timeoutput.text =tdtime;
-(IBAction)canceltime
[Time setDate:[NSDate date] animated:YES];
tdtime= [timeformatter stringFromDate:Time.date];//Asigning the date to the string
timeoutput.text =tdtime;
-(IBAction)canceldate
[Today setDate:[NSDate date] animated:YES];
tddate= [dateformatter stringFromDate:Today.date];//Asigning the date to the string
dateoutput.text =tddate;
@end[/CODE] What am I missing? It keeps coming up Null I need it saved right so I can send it through email

softwarespecial wrote:
why can't I have the prefs saved in the .h
You can save that address in an ivar if you want to, but there's no purpose to that. The standardUserDefaults object is a +shared class object+. It's like a dictionary object that's maintained for your program by the NSUserPreferences class. You can read from or write to it at any time for the duration of your program. So whenever you get the shared object's address [NSUserDefaults standardUserDefaults], you're just getting the address of that same object each time.
In case the above doesn't make sense, I ran across a good explanation by Danneman in the last message on this page: [http://www.iphonedevsdk.com/forum/iphone-sdk-development/18716-set-settings-va riable-code.html].
When I did that as you so wisely pointed out it didn't work but when I saved it at each point I needed it it works.
When you change two things at once it's easy to forget the first and assume the second change solved the problem. Actually, I don't think saving prefs in your ivar had anything to do with your bug. What fixed it was getting a pointer to the shared std defaults object in this method:
-(void)permsavedattime
NSUserDefaults *prefs = [NSUserDefaults standardUserDefaults]; <-- get the shared object
tddate=[prefs stringForKey:@"testing"];
tdtime=[prefs stringForKey:@"timetesting"];
dateoutput.text =[[NSString alloc] initWithFormat:@"%@",tddate];
Without the first line of the above, I'm fairly sure that your prefs ivar was nil. I didn't see any code that initialized that ivar prior to the first time userdefaultdate ran. It looked to me like permsavedattime ran at start up, well before prefs was set in userdefaultdate. If you're interested in backtracking, restore the file to the way it was when you posted, then add a NSLog() like this:
-(void)permsavedattime
// NSUserDefaults *prefs = [NSUserDefaults standardUserDefaults]; <-- get the shared object
NSLog(@"prefs=%@", prefs);
tddate=[prefs stringForKey:@"testing"];
tdtime=[prefs stringForKey:@"timetesting"];
dateoutput.text =[[NSString alloc] initWithFormat:@"%@",tddate];
I wish to save lets say five different things to NSUSerDefaults would I be able to do it all with my NSUserDefaults prefs or would I have to create a another one for some of them?
You know the answer to your second question now, right? The important point is that you're never creating the shared object, you're just asking for its address whenever you need it.
Btw, there's another user defaults method you should know about: The synchronize method writes the data to disk. You might want to do that when your app is ready to exit. E.g., in the app delegate:
- (void)applicationWillTerminate:(UIApplication *)application {
NSUserDefaults *prefs = [NSUserDefaults standardUserDefaults];
[prefs synchronize];
Although the docs suggest synchronize when the app is about to exit, I'm not sure it's necessary. I think the system might write the defaults out to disk anyway when the app terminates, but not sure about this. +User Defaults Programming Topics for Cocoa+ says:
On Mac OS X v10.5 and later, in applications in which a run-loop is present, synchronize is automatically invoked at periodic intervals. Consequently, you might synchronize before exiting a process, but otherwise you shouldn’t need to.
The above is in the iPhone edition, so I think it applies.
It might also be a good idea to update the data and call resetStandardUserDefaults in didReceiveMemoryWarning. I'm not clear about the need for reset either though, since the system may do that for you as well. But on a memory warning, you would definitely want to update the user default data if some of it is stored in an object to be released. You can find out how your app behaves on a memory warning by selecting Hardware->Simulate Memory Warning from the iPhone Simulator menu.
- Ray

Downloads from itunesU where viewed, played and saved?

downloads from itunesU where viewed , played and saved?

lse123 wrote:
downloads from itunesU where viewed , played and saved?
Look to see where they are stored in iTunes. Most are downloaded and stored in iTunes U under library. Those should be shown in iTunes U which is a part of the iPod app on the iPad. I have had a couple that had bad data in the metadata and were classified as Movies and placed in Movies. I selected those and right clicked (control click if no mouse with right click) on those, selected Get Info, selected Options, and changed Media Kind to itunes U. They were moved to the iTunes U section by iTunes.

Set The Secured Files, Not allow printing and saving to another location

Dear Sir / Madam,
Please help...
Possible to set the security permission for share files, not allow end users to printing and saving a PDF to another location.
Thanks,
Alex Tai

Hi Alex,
Possible to set the security permission for share files, not allow end users to printing and saving a PDF to another location.
Based on my tests, users can save the document with only Read permission, which is by design. If you don’t want users to print files, please do not give the print permissions on printers.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

I have created a form in InDesign, exported to a pdf, created an editable form and saved. When I open the form and make changes and save, the reopen the changes are there. If try to email this form as an attachment after editing, the attachment is alway

I have created a form in InDesign, exported to a pdf, then created an editable form and saved. When I open the form and make changes and save, then reopen the changes are there. If try to email this form as an attachment after editing, the attachment is always minus the edits. ????

Hi chuck,
If you ave created the form and then filling it yourself and saving the form, the filled data should be there when you reopen the same form.
Can you please send the form to me at [email protected] so that I can have a look.
Regards,
Rave

I am unable to open a project that I have worked on and saved. I get an error message that the file is damaged and cannot be opened.

I am unable to open a project that I have worked on and saved. I get an error message that the file is damaged and cannot be opened.

Leslie Tanaka
Travel and detours have kept me from following up sooner. If the problem that you wrote about still persists.....
Let us go back over that Adobe document regarding troubleshooting damaged projects.
3. Delete the Application Preferences
Where you able to follow that path and delete the Adobe Premiere Elements Prefs file at the end of the path? And, after you did, did the saved/closed programs still refuse to open? If you could not carry out this procedure, what were the limiting factors that kept you from do
7. Test to see if individual media files are causing the problem.
That is an important one. How far did you get into following the instructions given in the document? If you could not complete the test, what was the major block that prevented you from doing so?
I want to make sure that we have gone through everything in that document and ruled all factors there in or out. If it was a matter of you not understanding the instructions, I am hoping that the above will channel you questions to me so that I can clarify anything that you did not understand in the Adobe document instructions.
I do not recall if I asked previously. Even if you cannot open all your saved/closed projects, can you still open a new project and save/close it? Maybe even reopen it?
Please review and consider.
Thank you.
ATR

CS3 crashes when Opening and saving files - also runs slow

Today, while using photoshop, it locked up on me & I had to force quit. It then wouldn't open a file either via Bridge or the open menu. I could create a new file, but it would hang while attempting to save.
I downloaded and ran the FixVCUIFramework, and it allowed me to open and save 1 file, before it started not saving or opening again. Running the Fix again has no effect.
I switched to another user account, and everything works fine - in fact PS runs much speedier in the 2nd user account than in my main account. I hadn't noticed how slow it had become in opening and saving.
Any ideas of where to look in trying to repair my main account? I don't want to have to migrate everything over to the 2nd account. Bridge in the 2nd account doesn't allow me to open all my folders, so I'd prefer not to work totally with a new user account.
PSCS3 10.0.1
Mac 2GHZ dual 4.5 gig ram
10 gig external scratch disk - PS running at 71%
Mac OS X.4.11
A day without Photoshop is like a day without sunshine ...
Thanks

A forced quit WILL create corruption.
An Archive and Install of the OS will give you a fresh system in your regular account while preserving your settings. Should take you less than 45 minutes.
But you may want to try deleting your Photoshop preferences and running the 10.4.11 update over your existing 10.4.11 system first. That may work too, and it would be faster.

I have typed many documents to pages and saved as a folder i have just looked in the folder and everything has gone help

i have typed many documents on pages and saved to a new folder i created i have just opened it half hour ago and saved some more and all ok i just reopened to save another and all the documents have gone help how do i get them back and where they go ??????

On Lion 10.7.x you need to hold the CMD+r Keys insyead of notting from an Instsall Disc, but try that & step 3 onward...
"Try Disk Utility
   1. Insert the Mac OS X Install disc, then restart the computer while holding the C key.
   2. When your computer finishes starting up from the disc, choose Disk Utility from the Installer menu. (In Mac OS X 10.4 or later, you must select your language first.)
      Important: Do not click Continue in the first screen of the Installer. If you do, you must restart from the disc again to access Disk Utility.
   3. Click the First Aid tab.
   4. Click the disclosure triangle to the left of the hard drive icon to display the names of your hard disk volumes and partitions.
   5. Select your Mac OS X volume.
   6. Click Repair Disk, (not Repair Permissions). Disk Utility checks and repairs the disk."
http://docs.info.apple.com/article.html?artnum=106214

I use pages to draft forms that i repeatedly use in my business. Last week i drafted a legal document and saved to my file. now i get message that it won't open without newer version of pages but i have the latest version whats up??

I use pages to draft forms that i repeatedly edit and use in my business. Ex: letterhead, envelopes, and legal forms. I recently drafted a legal form
for a client. saved it and then reopened and printed the next day. now when i try to open that form, ( or letterhead or envelope) i get a message that
it wont open and that i need a newer version of pages. but my pages software is up to date. Whats up with this??

You have 2 versions of Pages on your Mac.
Pages 5 is in your Applications folder.
Pages '09/'08 is in your Applications/iWork folder.
You are alternately opening the wrong versions.
Pages '09/'08 can not open Pages 5 files and you will get the warning that you need a newer version.
Pages 5 can open Pages '09 files but may damage/alter them. It can not open Pages '08 files at all.
Once opened and saved in Pages 5 the Pages '09 files can not be opened in Pages '09.
Anything that is saved to iCloud is also converted to Pages 5 files.
All Pages files no matter what version and incompatibility have the same extension .pages.
Pages 5 files are now only compatible with themselves on a very restricted set of hardware, software and Operating Systems and will not transfer correctly on any other server software than iCloud.
Note: Apple has removed over 100 features from Pages 5 and added many bugs:
http://www.freeforum101.com/iworktipsntrick/viewforum.php?f=22&sid=3527487677f0c 6fa05b6297cd00f8eb9&mforum=iworktipsntrick
Archive/trash Pages 5, after exporting all Pages 5 files to Pages '09 or Word .docx, and rate/review it in the App Store, then get back to work.
Peter

CSA 5.2.0225, Rule 576, and saving attachments in Outlook 2003

Similar Messages

Maybe you are looking for