Solved

IE7 blocked when following link in office document

Posted on 2009-05-09
7
549 Views
Last Modified: 2013-12-08
Hello,
I have users on xp sp3 computers with office xp and ie6. After upgrading to IE7, they get an error when following url links embedded in office documents. So if they click on www.google.com in a Word document or in an email, they get the error "This operation has been cancelled due to restrictions in effect on this computer". But opening IE7 first and then browsing to the same url works fine.
We use a gpo (server 2003) for these users with User Configuration -> Administrative Templates -> System > Run Only Allowed Windows Applications enabled. The list contains iexplore.exe. I also tried adding "iexplore.exe www.google.com" and then following www.google.com in word, still blocked.
When I watch taskman when logged in with a profile without the gpo applied, I can't see an extra process fired up before IE7 is launched. I haven't tried process explorer yet, but I thought I try here to see if anyone already knows the answer? Is the allowed applications list the right place to look fix this problem?
Thanks
0
Comment
Question by:DorisOnline
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 27

Expert Comment

by:bluntTony
ID: 24343321
Have a look in [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Restrictions] (and the equivalent in HKCU).
Any restriction values in here? Is it just office documents, or any links at all?
There is a restriction which disallows opening a link in a new window - NoOpenInNewWnd. Possibly this?
http://www.pctools.com/guides/registry/detail/442/
 
0
 
LVL 27

Expert Comment

by:bluntTony
ID: 24343324
typo - meant to say ...and the equivalent in HKLM...
0
 

Author Comment

by:DorisOnline
ID: 24343461
Hi bluntTony,
When user is logged on, there is only one value in HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions
which is "noextensionmanagement" and set to 1.
I also checked the system key in HKLM and there are no values set at all.
Also, urls in word and outlook do launch IE6; it just doesn't launch IE7.
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:DorisOnline
ID: 24343476
I've also tried setting the noextensionmanagement to 0 and adding NoOpenInNewWnd, setting it to 0; no luck. I did this under HKEY_CURRENT_USER since the HKLM part doesn't even have an internet explorer section under microsoft.
0
 
LVL 27

Accepted Solution

by:
bluntTony earned 250 total points
ID: 24343483
Have a look at this : http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_22158998.html

Looks like this person had pretty much the same problem as you, the asker posted their own solution.
0
 

Author Comment

by:DorisOnline
ID: 24343568
You're absolutely right; the person had the same problem and all I needed to do was change IEXPLORE.EXE to iexplore.exe in the reg value. The rest of the solution was not necessary and not relevant, since the instructions were for IE6, not IE7 (the reset web settings is in IE6, not IE7).

Incidentally, looking in our allowed list of processes, we have both iexplore.exe and IEXPLORE.EXE, so I think we may have had similar problems, but then with IE6. And thinking back, I recall we have had odd problems where we had to put certain processes both in upper- and lowercase in the allowed list to make things work. Apparently the windows shell is case-sensitive.. For now we have only a few IE7 computers so it's no big problem, but if we are going to roll this out on dozens of pcs, I hate to be around.

Thanks for the solution!
0
 
LVL 27

Expert Comment

by:bluntTony
ID: 24343693
Glad you got it sorted :0)
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This article describes a method of delivering Word templates for use in merging Access data to Word documents, that requires no computer knowledge on the part of the recipient -- the templates are saved in table fields, and are extracted and install…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question