Solved

Group Policy Restrict Run Problem - Viewing .jpg from Outlook gives access denied.

Posted on 2004-10-07
5
1,049 Views
Last Modified: 2008-02-01
The system is running Windows XP and due to this user's desire to download and run everything he gets his fingers on I am setting up this new policy.  Everything seems to be ok so far except one problem.  When I double click on an image from Oulook (XP) I seem to get an access denied error message.

When I save the .JPG to disk and double click it from there, the Windows Picture and Fax viewer displays it fine.  When I disable the policy I notice that rundll32.exe is called from outlook and the picture displays fine, but even after adding rundll32.exe and explorer.exe to the allowed list of apps it still doesn't work.  Any thoughts?

One more thing - the default picture viewer is a DLL not an EXE so I imagine outlook is trying to use "something" to spawn this DLL, but I don't know what it is.
0
Comment
Question by:swabeui
  • 3
  • 2
5 Comments
 
LVL 20

Accepted Solution

by:
Debsyl99 earned 500 total points
ID: 12254620
Hi

What policy settings are you using to start with? Check your event logs for any further info, and does it have to open with picture viewer? Have you tried changing the files association so that jpg/jpeg etc files open with Paint, or internet explorer as a workaround?
This also may be worth a look at if you haven't already in case there's some interaction going on with this aspect,
Modify Outlook 2002 and XP Attachment Restrictions
http://www.winguides.com/registry/display.php/929/

Deb :))
0
 
LVL 20

Expert Comment

by:Debsyl99
ID: 12254875
Ah read everything except the title properly! Doh, ok understand the policy settings fine.
0
 

Author Comment

by:swabeui
ID: 12260906
Internet Explorer is worth a try.  I will give it a shot on Tuesday when I get back into the office.  Paint or any other image modification app is out of the question as that is one of the things I am trying to restrict them from.  They spend all day trying to make photoshop mods of people and emailing them around.
0
 

Author Comment

by:swabeui
ID: 12360547
IE worked for both JPG and GIF files which is all I really needed.  Should have thought of that, but oh well, I got the solution anyway.
0
 
LVL 20

Expert Comment

by:Debsyl99
ID: 12360561
Hi

Glad it worked!

Deb :))
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This article will show you how to create an ISO CD-ROM/DVD-ROM image (*.iso), and MD5 checksum signature, for use with VMware vSphere Hypervisor 6.5 (ESXi 6.5). It's a good idea to compare checksums, because many installations fail because of a corr…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now