Windows security error "These files might be harmful to your computer"

When we copy files from our local computers (workstations) to a server share we get the message:

"These files might be harmful to your computer
Your Internet security settings suggest that one or more files may be harmful. Do you want to use it anyway?"

It seems the only way to get rid of the message is add the domain name to the Trusted Sites for the Intranet zone such as:

file://*.domain.local

Is this the correct way to do it or is there a more orthodox procedure? This problem does not seem to be a problem on other networks I have seen but on this one, yes.

Thank you!

ImImInAsked: 2016-02-16

Who is Participating?

Experts Exchange Solution brought to you by

Enjoy your complimentary solution view.

Get this solution by purchasing an Individual license! Start your 7-day free trial.

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LVL 34

Scott CSenior EngineerCommented: 2016-02-16

A more elegant way to control this would be with Group Policy. Use gpedit.msc and drill down to:

User Configuration → Policies → Administrative Templates → Windows Components → Internet Explorer → Internet Control Panel → Security Page

Enable "Intranet Zone Template" with the Low option.

Enable "Site to Zone Assignment List" and use the "Show" button to add your "sites" (servername, servername.domain, ipaddress - the values you enter depend on what name or IP you use to access the share) with a value of 1.

Finally - and this is the most important step - drill down one folder in gpedit to "Intranet Zone" and enable for "Launching programs and unsafe files", choosing "Enable" from the drop-down.

Close gpedit, reboot or run gpupdate /force and the Windows Security dialogues should be gone.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial

ImImInAuthor Commented: 2016-02-16

I actually have already done that to push to all clients. My question is more precisely is this the correct way to do it (adding the domain to the trusted Intranet sites) or is there a more orthodox procedure? Should this just not work without having to make such a change? After all, we are making the transfer from from one node to another node on the same network.

LVL 34

Scott CSenior EngineerCommented: 2016-02-16

Yes it is. Windows is looking at your network as being part of the Internet.