Group Policy Restrict Run Problem - Viewing .jpg from Outlook gives access denied.

Posted on 2004-10-07
Last Modified: 2008-02-01
The system is running Windows XP and due to this user's desire to download and run everything he gets his fingers on I am setting up this new policy.  Everything seems to be ok so far except one problem.  When I double click on an image from Oulook (XP) I seem to get an access denied error message.

When I save the .JPG to disk and double click it from there, the Windows Picture and Fax viewer displays it fine.  When I disable the policy I notice that rundll32.exe is called from outlook and the picture displays fine, but even after adding rundll32.exe and explorer.exe to the allowed list of apps it still doesn't work.  Any thoughts?

One more thing - the default picture viewer is a DLL not an EXE so I imagine outlook is trying to use "something" to spawn this DLL, but I don't know what it is.
Question by:swabeui
  • 3
  • 2
LVL 20

Accepted Solution

Debsyl99 earned 500 total points
ID: 12254620

What policy settings are you using to start with? Check your event logs for any further info, and does it have to open with picture viewer? Have you tried changing the files association so that jpg/jpeg etc files open with Paint, or internet explorer as a workaround?
This also may be worth a look at if you haven't already in case there's some interaction going on with this aspect,
Modify Outlook 2002 and XP Attachment Restrictions

Deb :))
LVL 20

Expert Comment

ID: 12254875
Ah read everything except the title properly! Doh, ok understand the policy settings fine.

Author Comment

ID: 12260906
Internet Explorer is worth a try.  I will give it a shot on Tuesday when I get back into the office.  Paint or any other image modification app is out of the question as that is one of the things I am trying to restrict them from.  They spend all day trying to make photoshop mods of people and emailing them around.

Author Comment

ID: 12360547
IE worked for both JPG and GIF files which is all I really needed.  Should have thought of that, but oh well, I got the solution anyway.
LVL 20

Expert Comment

ID: 12360561

Glad it worked!

Deb :))

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cannot connect to share on new Win8 PC 3 953
Print Server: How to Create it? 1 757
no desktop when login to windows server 2000 7 322
How to install Windows 2000 network drivers 4 94
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Some code to ensure data integrity when using macros within Excel. Also included code that helps secure your data within an Excel workbook.
Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now