Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

IE7 blocked when following link in office document

Posted on 2009-05-09
7
Medium Priority
?
553 Views
Last Modified: 2013-12-08
Hello,
I have users on xp sp3 computers with office xp and ie6. After upgrading to IE7, they get an error when following url links embedded in office documents. So if they click on www.google.com in a Word document or in an email, they get the error "This operation has been cancelled due to restrictions in effect on this computer". But opening IE7 first and then browsing to the same url works fine.
We use a gpo (server 2003) for these users with User Configuration -> Administrative Templates -> System > Run Only Allowed Windows Applications enabled. The list contains iexplore.exe. I also tried adding "iexplore.exe www.google.com" and then following www.google.com in word, still blocked.
When I watch taskman when logged in with a profile without the gpo applied, I can't see an extra process fired up before IE7 is launched. I haven't tried process explorer yet, but I thought I try here to see if anyone already knows the answer? Is the allowed applications list the right place to look fix this problem?
Thanks
0
Comment
Question by:DorisOnline
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 27

Expert Comment

by:bluntTony
ID: 24343321
Have a look in [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Restrictions] (and the equivalent in HKCU).
Any restriction values in here? Is it just office documents, or any links at all?
There is a restriction which disallows opening a link in a new window - NoOpenInNewWnd. Possibly this?
http://www.pctools.com/guides/registry/detail/442/
 
0
 
LVL 27

Expert Comment

by:bluntTony
ID: 24343324
typo - meant to say ...and the equivalent in HKLM...
0
 

Author Comment

by:DorisOnline
ID: 24343461
Hi bluntTony,
When user is logged on, there is only one value in HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions
which is "noextensionmanagement" and set to 1.
I also checked the system key in HKLM and there are no values set at all.
Also, urls in word and outlook do launch IE6; it just doesn't launch IE7.
0
Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

 

Author Comment

by:DorisOnline
ID: 24343476
I've also tried setting the noextensionmanagement to 0 and adding NoOpenInNewWnd, setting it to 0; no luck. I did this under HKEY_CURRENT_USER since the HKLM part doesn't even have an internet explorer section under microsoft.
0
 
LVL 27

Accepted Solution

by:
bluntTony earned 1000 total points
ID: 24343483
Have a look at this : http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_22158998.html

Looks like this person had pretty much the same problem as you, the asker posted their own solution.
0
 

Author Comment

by:DorisOnline
ID: 24343568
You're absolutely right; the person had the same problem and all I needed to do was change IEXPLORE.EXE to iexplore.exe in the reg value. The rest of the solution was not necessary and not relevant, since the instructions were for IE6, not IE7 (the reset web settings is in IE6, not IE7).

Incidentally, looking in our allowed list of processes, we have both iexplore.exe and IEXPLORE.EXE, so I think we may have had similar problems, but then with IE6. And thinking back, I recall we have had odd problems where we had to put certain processes both in upper- and lowercase in the allowed list to make things work. Apparently the windows shell is case-sensitive.. For now we have only a few IE7 computers so it's no big problem, but if we are going to roll this out on dozens of pcs, I hate to be around.

Thanks for the solution!
0
 
LVL 27

Expert Comment

by:bluntTony
ID: 24343693
Glad you got it sorted :0)
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question