Solved

IE7 blocked when following link in office document

Posted on 2009-05-09
7
551 Views
Last Modified: 2013-12-08
Hello,
I have users on xp sp3 computers with office xp and ie6. After upgrading to IE7, they get an error when following url links embedded in office documents. So if they click on www.google.com in a Word document or in an email, they get the error "This operation has been cancelled due to restrictions in effect on this computer". But opening IE7 first and then browsing to the same url works fine.
We use a gpo (server 2003) for these users with User Configuration -> Administrative Templates -> System > Run Only Allowed Windows Applications enabled. The list contains iexplore.exe. I also tried adding "iexplore.exe www.google.com" and then following www.google.com in word, still blocked.
When I watch taskman when logged in with a profile without the gpo applied, I can't see an extra process fired up before IE7 is launched. I haven't tried process explorer yet, but I thought I try here to see if anyone already knows the answer? Is the allowed applications list the right place to look fix this problem?
Thanks
0
Comment
Question by:DorisOnline
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 27

Expert Comment

by:bluntTony
ID: 24343321
Have a look in [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Restrictions] (and the equivalent in HKCU).
Any restriction values in here? Is it just office documents, or any links at all?
There is a restriction which disallows opening a link in a new window - NoOpenInNewWnd. Possibly this?
http://www.pctools.com/guides/registry/detail/442/
 
0
 
LVL 27

Expert Comment

by:bluntTony
ID: 24343324
typo - meant to say ...and the equivalent in HKLM...
0
 

Author Comment

by:DorisOnline
ID: 24343461
Hi bluntTony,
When user is logged on, there is only one value in HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions
which is "noextensionmanagement" and set to 1.
I also checked the system key in HKLM and there are no values set at all.
Also, urls in word and outlook do launch IE6; it just doesn't launch IE7.
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:DorisOnline
ID: 24343476
I've also tried setting the noextensionmanagement to 0 and adding NoOpenInNewWnd, setting it to 0; no luck. I did this under HKEY_CURRENT_USER since the HKLM part doesn't even have an internet explorer section under microsoft.
0
 
LVL 27

Accepted Solution

by:
bluntTony earned 250 total points
ID: 24343483
Have a look at this : http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_22158998.html

Looks like this person had pretty much the same problem as you, the asker posted their own solution.
0
 

Author Comment

by:DorisOnline
ID: 24343568
You're absolutely right; the person had the same problem and all I needed to do was change IEXPLORE.EXE to iexplore.exe in the reg value. The rest of the solution was not necessary and not relevant, since the instructions were for IE6, not IE7 (the reset web settings is in IE6, not IE7).

Incidentally, looking in our allowed list of processes, we have both iexplore.exe and IEXPLORE.EXE, so I think we may have had similar problems, but then with IE6. And thinking back, I recall we have had odd problems where we had to put certain processes both in upper- and lowercase in the allowed list to make things work. Apparently the windows shell is case-sensitive.. For now we have only a few IE7 computers so it's no big problem, but if we are going to roll this out on dozens of pcs, I hate to be around.

Thanks for the solution!
0
 
LVL 27

Expert Comment

by:bluntTony
ID: 24343693
Glad you got it sorted :0)
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question