Outlook 2007 Group Policy settings not applied
I have Outlook 2007 clients with Windows Vista and Windows 7 machines in our domain LAN. I have downloaded Administrative Templates of Office 2007 and added outlk12.adm into the Group Policy. I have applied the group policy into two users after I changed some settings including "Security Settings for Macros" and "Programmatic Access Security".
The weird thing is that, when I open Outlook and go to Tools->Trust Center and then click on Macro Security, I see the settings there I have done through group policy (although they're all greyed out). but when I click on Programmatic Access, I still see the first option is selected despite the fact that I have set it to be on "No security check" in the group policy.
Why Outlook 2007 group policy apply for some settings and doesn't apply for some other?
The weird thing is that, when I open Outlook and go to Tools->Trust Center and then click on Macro Security, I see the settings there I have done through group policy (although they're all greyed out). but when I click on Programmatic Access, I still see the first option is selected despite the fact that I have set it to be on "No security check" in the group policy.
Why Outlook 2007 group policy apply for some settings and doesn't apply for some other?
ASKER
I tried all 4 options above. rsop.msc was very helpfull. I found the corresponding registry keys of the Group Policy settings anf checked their meaning from this website: http://support.microsoft.com/kb/926512
some thing weird I found which I like to let you know. Although I have set "Programmatice Access Security" in group policy, I couldn't find an equivalent registry entry in rsop results, nor I found a description of that in http://support.microsoft.com/kb/926512 website. It seems Microsoft doesn't support it although it is in User Configuration->Administrat
any comment?
some thing weird I found which I like to let you know. Although I have set "Programmatice Access Security" in group policy, I couldn't find an equivalent registry entry in rsop results, nor I found a description of that in http://support.microsoft.com/kb/926512 website. It seems Microsoft doesn't support it although it is in User Configuration->Administrat
any comment?
I don't know where you found out that MS doesn't support it. It may not support custom-coded solutions that conflict with it, if that's what you mean. Otherwise, the setting itself is well known, supported, and documented.
Here's some info that may help:
http://msdn.microsoft.com/en-us/library/bb226709.aspx
Here's some info that may help:
http://msdn.microsoft.com/en-us/library/bb226709.aspx
ASKER
I don't say Microsoft doesn't support it and I see it's documented. I don't understand why it doesn't have any effect on Outlook. I am giving up.
Did you try it on another system? Did you try creating a new profile for the user?
ASKER
Yes. I have done all 4 options you gave me as well as testing with a new user profile. but to no avail.
I have this EXACT same issue and have not found a way around it. I will keep looking into it and report back here if I figure it out. Please don't give up :)
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I also read a KB article stating that the outlook 12 (2007) admx group policy template was backwards with its settings. That is, enabled was really disabled, disabled was really enabled, and that you were supposed to edit the .admx file and switch 1 with 0 and 0 with 1... or something like that... I can't find that damn article now unfortunately... but you may want to do the opposite of what you want to see if it works.
In the end the 3 registry settings that I mentioned made it work for me, although under the trust center the option is still not showing up correct...
In the end the 3 registry settings that I mentioned made it work for me, although under the trust center the option is still not showing up correct...
I am having this same problem, although it is also happening in OWA. Basically I want to allow .crt files to be received as attachments. I've made the GPO changes via the ADMX template but still no go.
Any ideas?
Any ideas?
trafsta - any idea how to do this on a terminal server when a user doesn't have rights to add reg keys to that section of HKCU in the registry?
Never mind comment above - was able to do it with a custom GPO but it still didn't resolve our issue, ie the prompt still shows.
1. Reboot
2. Gpupdate
3. Run rsop.msc to see what applied
4. Try another system
Lastly, if still not working, Try renaming local profile to something else, allowing new profile to be created - see if it fixes it. If I does, transfer what is needed to new profile, abandon/delete old one.