Troubles with opening attachments when user have restristed priviledge to run executable code only from ProgramFiles and Windows folders.

I try to restrict users from executing any potentialy dangerous files. So according to Windows policies I set. Users can run any application from Program Files, Program Files (x86), Windows and all users' desktop folder. Users have no permission to write anything in this folders. When user duble clicks for example *.doc document on his desktop - document opens with MS Word just fine. But when user try to open this document from e-mail attachment directly (selecting open with MS Word, instead of saving) - he sees an error - "This action is restricted by local policy. Ask your system administrator." (not exact text).
So I want, users able to open attachments from Thunderbird automatically, but not able to run any application or link, except Program Files, Program Files (x86), Windows and all users' desktop folder. How can I get this result?
Thanks in advance.
Serious Diman.
P.S. Sorry for my bad english. It's not my native language.

Thanks for answering.
I found out what was happening.
This strange "bug" affects several computers with Windows 7 Ultimate in my case.
When you create SRP (software restriction policies) it creates two default rules for running programs: windows folder and Program Files folder. Manually I add "C:\Program Files (x86)" in unrestricted locations. BUT Windows and Program Files folder linked in default rules not directly, but through registry keys. And this part seems tricky. You CAN run executables from Program Files. You CAN run executables from Program Files (x86). But if Thunderbird or Firefox try to run MSword, or excel or writer for opening *.doc or *.odt or some other downloaded file - running from Program Files blocked by SRP.
So to resolve this problem you just need to replace rules for undirect paths like %HKLM/software/microsoft/windows ... etc% with direct ones, such as "C:/Windows" and "C:/Program Files/". After this all works fine. Attachments and downloaded files opens automatically without problems.

Similar Messages

  • I have a 27"iMac running Snow Leopard 10.6.8. and Windows 7 on      parallels 6. My dvd player will not play DVDs. Has anybody else had this problem.

    My DVD player will not play any DVDs. Anybody else have this problem.

    This has been sorted.Got a new iMac 27" with Lion already installed and DVD player works. Thank you to all who replied.     Meloc

  • I have a Lucid 2 LG.  I have been having trouble with insuffient storage.  I have a 8G phone and have spent hours with Tier 2 tech trying to move info from the internal storage to the SD card with no luck,  When I go to storage in the settings it states t

    I have a Lucid 2 LG.  I have been having trouble with insuffient storage.  I have a 8G phone and have spent hours with Tier 2 tech trying to move info from the internal storage to the SD card with no luck,  When I go to storage in the settings it states that over 4 gigs is for Misc?  System data takes up over 4 gigs.  No one can tell me what system data consist of.  So My question is does anyone know what system data is?  I am assuming I have a 8 gigphone but can only use 4 gigs???

    System data is the OS or operating system.  That is where the recovery stays separated from the rest of the storage so that it doesn't get corrupted.  It is not accessible and non-movable.

  • I'm having trouble with my macbook pro, I have only had it for three months, when I plugged a camera sd card into the sd slot it isn't appearing anywhere on the computer and i can not access my photographs. can somebody please help me?

    I'm having trouble with my macbook pro, I have only had it for three months, when I plugged a camera sd card into the sd slot it isn't appearing anywhere on the computer and i can not access my photographs. can somebody please help me?

    Shootist007 wrote:
    Clifton I must disagree with you on the above statement. It is my opinion and experience that you should never connect the camera directly to any computer, Mac Windows Whatever.
    It is always best to Remove the memory card from the camera and put it in a card reader, whether an external reader or one built into the computer, to copy images from the card.
    Hi Shootist. I would be interested in hearing some reasoning on this. I almost always use a USB cable to connect my camera to the MBP for transferring pictures, and have moved about 30,000 this way over the last 6 years since my photography went digital. Recently, on the rare occassions when I have only a few to transfer and I was too lazy to go for the cable, I have used the card reader; about half those times I have difficulty getting the MBP to recognise the card. I find I have to press the card very hard into the slot for it to be recognised.
    My rationale is quite possibly wrong, but I feel that the USB connectors are more robust and hard-wearing than the flimsy connectors on an SD card. Also, I haven't measured it, but I think the data transfer is faster with the cable. (I just came across this test, which reports noticeably faster transfer for cable than built-in card reader, but the computer was a PC)
    Chiara, sorry for hijacking your thread.

  • With Panorama/TabCandy, when you have some "App Tabs" isolated into a group then open a normal tabs included into antoher group. Clicking on an "App Tab" makes the normal tabs disappear.

    With Panorama/TabCandy, when you have some "App Tabs" isolated into a group then open a normal tabs included into antoher group. Clicking on an "App Tab" on the navigation bar makes the normal tabs disappear from this bar.

    Panorama/TabCandy is in an early stage of development and has many open bug reports. One area that is being discussed is how App Tabs should be integrated into TabCandy, not surprisingly there are varying opinions.

  • Having trouble getting appleworks 6 to open. When I have tried to update, I am getting a shared library error.

    Appleworks 6 will no longer open. When I have tried to update appleworks, I am getting a  message saying a shared library error is preventing it from updating.
    Any suggestions?

    Might be worth repeating the question in this forum:
    AppleWorks

  • I'm having trouble with custom ringtones.  I have downloaded the free software "makeTones" and have created some ringtones.  I then copied those to Mac and played them in ITunes.  My Itunes does not have a ringtone tab.  I can not sync the ringtones.

    I'm having trouble with custom ringtones.  I have downloaded the free software "makeTones" and have created some ringtones.  I then copied those to Mac and played them in ITunes.  My Itunes library does not have a ringtones tab.  I can not sync the ringtones (or I don't know how)!  Please help.

    Yes, the file extension is M4R.  Does it matter where I save these files on my Macbook?  I then opened them in Itunes and played them.  I did find the Tones folder in Itunes but the Tones or Ringtones tab does not show up when I select Iphone (within Itunes).  When I open the Tones folder in the Library, it is empty.  Thanks in advance for your help.

  • Having trouble with the syntax when trying to only print some random pages from a multi page documen

    Having trouble with the syntax when trying to only print some random pages from a multi page document.  So far in the Print Selection Area, I have chosen "pages" and then typed 1,3-4 so as NOT to print page 2 but this does not seem to work. - Help Please

    In my updated firefox, the print button does NOT open print preview first.
    How can I access print preview function?

  • I just installed the Lion operating system, basically to upgrade my iPhone. I didn't realize that my Microsoft Office 2004 application would no longer work. I have been using Word for my writing and I receive most of my emails with Word attachments. I hav

    I just installed the Lion operating system, basically to upgrade my iPhone. I didn't realize that my Microsoft Office 2004 application would no longer work. I have been using Word for my writing and I receive most of my emails with Word attachments. I have been using Apple products for years, always touting their reliability and customer service. I am not a techie, I just want to be able to do what I do on the computer and Apple always fulfilled my needs. Now I am told because of some operating system gobbledygook, I have to go out and purchase new software to use Word. This is despicable. I see no particular benefit to using Lion, but I do see a lot of detriments. Apple now seems to have turned into Microsoft, making software obsolete so they can make more money and to **** with the customer. You can be sure that my next computer will be a PC. I have completely lost confidence in Apple.

    I seem to never tire of saying this. It was for Apple when they first announced 10.7 to disclose this. Yes, it was widely reported -- or rather, rumored -- but not by Apple. And many people who have gotten caught by this assumed that Apple itself would have told them beforehand about the loss of this very important feature which they had come to rely on. As far as I know, not even in fine print, does this appear anywhere on the Lion announcement or any of its links.
    I am not saying Apple had to continue Rosetta in Lion, or forever, just that if it was going to be dropped, it should have been made known.
    As relative "insiders" we should not forget that many people don't have the time, habit or interest to do this kind of research. I think it is a breach of trust that Apple has never directly made this announcement or given people the opportunity to decide beforehand if giving up their PPC apps for a new OS is a worthwhile tradeoff.

  • Hi i am have had a lot of trouble emptying my trash. when i go to put something in there it asks from my password and the item goes off the screen, but this does not clear any space on the hard drive.

    Hi i am have had a lot of trouble emptying my trash. when i go to put something in there it asks from my password and the item goes off the screen, but this does not clear any space on the hard drive.

    1. Triple-click the line below to select it:
    ~/.Trash
    2. Right-click or control-click the highlighted line and select
    Services ▹ Show Info
    from the contextual menu. An Info dialog should open.
    3. The dialog should show "You can read and write" in the Sharing & Permissions section. If that's not what it shows, click the padlock icon in the lower right corner of the window and enter your password when prompted. Use the plus- and minus-sign buttons to give yourself Read & Write access and "everyone" No Access. Delete any other entries in the access list.
    4. In the General section, uncheck the box marked Locked if it's checked.
    5. From the action menu (gear icon) at the bottom of the dialog, select Apply to enclosed items and confirm.
    6. Close the Info window and test.

  • I am having trouble with opening PDF files

    I am having trouble with opening PDF files. When I click on the file, I end up with 40 or more folders all over my desktop, which cannot be opened.  Any idea what I should do?

    try right click on the file, and select open with preview.. thats the mac os x pdf viewer

  • Trouble with opening images from dreamweaver cs6(64bit) to photoshop cs6(64bit).

    Hi guys i need help! I have trouble with opening images from dreamweaver cs6(64bit) to photoshop cs6(64bit). I uninstalled and went to preferences/file types editors to set up ps6 as primary but I still get some error.After i click image in dreamweaver,I get this message-Unable to launch...Please be sure that application exists and that there is enough memory to run it..

    Can you Launch Photoshop normally from your desktop shortcuts?
    I usually keep DW and PS open at all times so I can switch back & forth.
    Nancy O.

  • I am having problems with the month of October.  When I have the full month view, the synced items from google calendars won't show.  But they do for all the other months.

    I am having problems with the month of October.  When I have the full month view, the synced items from google calendars won't show.  But they do for all the other months.  There is definitely a glitch somewhere because if I am on day view and try to click on day 15 of October, it will not let me.  It totally is acting weird.

    Free fonts, fonts from a reliable foundry?
    Have you tried removing them temporarily?
    Do you still have problems if you create a new Windows user account and log in with that? How about if you start in Safe Mode?
    And I would run a memory checker and see Troubleshoot font problems | Windows

  • I have a problem with IOS 7 when I am installing app on App Store. I must read and accept new terms and condition. However, I read all new terms that I don't see Agree button to accept. Can you check help me this problem?

    I have a problem with IOS 7 when I am installing app on App Store. I must read and accept new terms and condition. However, I read all new terms but I still don't see "Agree" button to accept. Can you check help me this problem?

    If it says 'Open' in the App Store, then it's on your device.  What happens when you press the 'Open' button in the App Store?
    The App is on your phone, somewhere.  Use Spotlight to find it, or you can reset your Home Screen layout, and then you'll definitely find it.

  • My computer continually asks me to enter my password for Keychain access. This problem is continuos and I am having trouble with eliminating it. I have changed my password through Security and my Accounts numerous times to no avail.  Is there anythin

    My computer continually asks me to enter my password for Keychain access. This problem is continuos and I am having trouble with eliminating it.
    I have changed my password through Security and my Accounts numerous times to no avail.
    Is there anything I can do other than Resetting the entire computer and re installing all of the software, apps, etc.etc.

    Back up all data before proceeding.
    Launch the Keychain Access application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad and start typing the name.
    Select the login keychain from the list on the left side of the Keychain Access window. If your default keychain has a different name, select that.
    If the lock icon in the top left corner of the window shows that the keychain is locked, click to unlock it. You'll be prompted for the keychain password, which is the same as your login password, unless you've changed it.
    Right-click or control-click the login entry in the list. From the menu that pops up, select
              Change Settings for Keychain "login"
    In the sheet that opens, uncheck both boxes, if not already unchecked.
    From the menu bar, select
              Keychain Access ▹ Preferences... ▹ First Aid
    There are four checkboxes in the window that opens. Check all of them. if they're not already checked. Close the window.
    Select
              Keychain Access ▹ Keychain First Aid
    from the menu bar and repair the keychain. Quit Keychain Access.
    If you use iCloud Keychain, open the iCloud preference pane and uncheck the Keychain box. You'll be prompted to delete the local iCloud keychain. Confirm. Then re-check the box. Follow one of the procedures described in this support article to set up iCloud Keychain on an additional device.

Maybe you are looking for

  • Configuration file for smart view for Hyperion planning

    Hi, We are using SmartView for accessing HyperionPlanning application. Please let me know how can we change the provider to use shared services and enable planning it for logging to file. Also which properties file is used for these configurations an

  • 10.6.8 Update hanging up up system?

    My 17" 2.9 GHz Intel Core 2 Duo - 4 GB Memory Laptop is sluggish after a reboot. Programs can't launch from the finder for several minutes. Programs set to Launch at Login will work, but you can't touch them with the mouse. Safe Boot will make things

  • Change Encoding from PCM to GSM

    i want to send sound over the network. i have already an application, which captures sound from a microphone, sends raw sound data(byte array) over the network and plays this sound on an other computer. how can i change the encoding? from pcm to gsm.

  • Reports in BIDS does not update when stored procedure is modified

    Hi, I am using SQL Server 2008 R2 SP1, and BIDS 2008 SP1. The problem I am about to define does NOT happen when the report is deployed to the report server, but only within the report development environment (BIDS). From within BIDS my reports are fe

  • Time Evaluation with multiple time events

    Dear Friends, I have an issue in our current project. Kindly try to help me with a solution. We are working on Time Management module with Positive Time Recording method and evaluation- India. (Payroll module is not implemented) My issue is: Evaluati