Solved

IE7 blocked when following link in office document

Posted on 2009-05-09
7
544 Views
Last Modified: 2013-12-08
Hello,
I have users on xp sp3 computers with office xp and ie6. After upgrading to IE7, they get an error when following url links embedded in office documents. So if they click on www.google.com in a Word document or in an email, they get the error "This operation has been cancelled due to restrictions in effect on this computer". But opening IE7 first and then browsing to the same url works fine.
We use a gpo (server 2003) for these users with User Configuration -> Administrative Templates -> System > Run Only Allowed Windows Applications enabled. The list contains iexplore.exe. I also tried adding "iexplore.exe www.google.com" and then following www.google.com in word, still blocked.
When I watch taskman when logged in with a profile without the gpo applied, I can't see an extra process fired up before IE7 is launched. I haven't tried process explorer yet, but I thought I try here to see if anyone already knows the answer? Is the allowed applications list the right place to look fix this problem?
Thanks
0
Comment
Question by:DorisOnline
  • 4
  • 3
7 Comments
 
LVL 27

Expert Comment

by:bluntTony
Comment Utility
Have a look in [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Restrictions] (and the equivalent in HKCU).
Any restriction values in here? Is it just office documents, or any links at all?
There is a restriction which disallows opening a link in a new window - NoOpenInNewWnd. Possibly this?
http://www.pctools.com/guides/registry/detail/442/
 
0
 
LVL 27

Expert Comment

by:bluntTony
Comment Utility
typo - meant to say ...and the equivalent in HKLM...
0
 

Author Comment

by:DorisOnline
Comment Utility
Hi bluntTony,
When user is logged on, there is only one value in HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions
which is "noextensionmanagement" and set to 1.
I also checked the system key in HKLM and there are no values set at all.
Also, urls in word and outlook do launch IE6; it just doesn't launch IE7.
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 

Author Comment

by:DorisOnline
Comment Utility
I've also tried setting the noextensionmanagement to 0 and adding NoOpenInNewWnd, setting it to 0; no luck. I did this under HKEY_CURRENT_USER since the HKLM part doesn't even have an internet explorer section under microsoft.
0
 
LVL 27

Accepted Solution

by:
bluntTony earned 250 total points
Comment Utility
Have a look at this : http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_22158998.html

Looks like this person had pretty much the same problem as you, the asker posted their own solution.
0
 

Author Comment

by:DorisOnline
Comment Utility
You're absolutely right; the person had the same problem and all I needed to do was change IEXPLORE.EXE to iexplore.exe in the reg value. The rest of the solution was not necessary and not relevant, since the instructions were for IE6, not IE7 (the reset web settings is in IE6, not IE7).

Incidentally, looking in our allowed list of processes, we have both iexplore.exe and IEXPLORE.EXE, so I think we may have had similar problems, but then with IE6. And thinking back, I recall we have had odd problems where we had to put certain processes both in upper- and lowercase in the allowed list to make things work. Apparently the windows shell is case-sensitive.. For now we have only a few IE7 computers so it's no big problem, but if we are going to roll this out on dozens of pcs, I hate to be around.

Thanks for the solution!
0
 
LVL 27

Expert Comment

by:bluntTony
Comment Utility
Glad you got it sorted :0)
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

#Citrix #Internet Explorer #Enterprise Mode #IE 11 #IE 8
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now