Hyperlinks are not opening after setting a GPO with an approved list. What am I missing?
We have set a list of applications through GPO that will be the only ones that an end user will be able to access. This was set in GPeditor in User configuration / Administrative Templates / System / Run only specified Windows applications.
Everything was set and its working as expected. Unfortunately, hyperlink will not open.
- The error reads: Your organization's policies are preventing us from completing this actions for you.
- Example of the error: If you receive an email with a hyperlink and you try to open it, you will get that error message. The address where the hyperlinks are pointing to are within the approved list.
My best guess is that we would need to add an application (or service) that may allow hyperlinks to work but I just cant find it.
I appreciate any ideas or suggestions on how we can get this to work once again.
Everything was set and its working as expected. Unfortunately, hyperlink will not open.
- The error reads: Your organization's policies are preventing us from completing this actions for you.
- Example of the error: If you receive an email with a hyperlink and you try to open it, you will get that error message. The address where the hyperlinks are pointing to are within the approved list.
My best guess is that we would need to add an application (or service) that may allow hyperlinks to work but I just cant find it.
I appreciate any ideas or suggestions on how we can get this to work once again.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Yes. iexplore.exe, firefox.exe and chrome.exe are currently on the list. The default search engine is Chrome.
ASKER
Hello David,
We have been using a group policy to make this happen. We tried creating the policy from the GPeditor and even from registry keys since its for a school's IT room. Both ways have worked successfully allowing the applications listed on all ~20 computers but unfortunately it is blocking for the ability to open hyperlinks.
Besides purchasing or installing another software, would there be any chance we can make it work with a GPO?
We have been using a group policy to make this happen. We tried creating the policy from the GPeditor and even from registry keys since its for a school's IT room. Both ways have worked successfully allowing the applications listed on all ~20 computers but unfortunately it is blocking for the ability to open hyperlinks.
Besides purchasing or installing another software, would there be any chance we can make it work with a GPO?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you David. Yes, I understand that it we disable word and receive a hyperlink that point out to work, it will fail. The issue here is that all hyperlinks are pointing to applications that are currently on the approved list. ie: you receive an email with a hyperlink to Microsoft Word. WHen you open it, it appears as blocked. (Note that Microsoft Word is in the approved list so it should open).
I understand your point on the NetNanny but at this moment, it is not an option to make this purchase so we need to use GPOs. It actually working but the hyperlinks have been "disabled" and we're trying to figure out what could be going on.
I understand your point on the NetNanny but at this moment, it is not an option to make this purchase so we need to use GPOs. It actually working but the hyperlinks have been "disabled" and we're trying to figure out what could be going on.
Guess I lost the train there. You are saying that Hyperlinks, such as Web addresses, are broken. Are you able to open attachments in Outlook?
ASKER
Hello lvjeff,
Let me recap:
We have a list of approved applications that we want some users to be able to access. These applications include Word, OneNote, Chrome, Firefox, Outlook, etc. The GPO we set for this to happen works perfectly and the users are only able to access the applications in that list.
The issue comes after setting that GPO on which I explain next:
Lets say youhave received an email with a word document. You open the document successfully and realize that the documentation contains a link that you need to access. Lets call that link www.bing.com. If you try to open that hyperlink, it gives you the error message:
Your organization's policies are preventing us from completing this actions for you.
The hyperlinks are all pointing to an internet address. As part of the approved list of applications, we have added iexplore.exe, google.exe, firefox.exe but we still get that error.
Let me recap:
We have a list of approved applications that we want some users to be able to access. These applications include Word, OneNote, Chrome, Firefox, Outlook, etc. The GPO we set for this to happen works perfectly and the users are only able to access the applications in that list.
The issue comes after setting that GPO on which I explain next:
Lets say youhave received an email with a word document. You open the document successfully and realize that the documentation contains a link that you need to access. Lets call that link www.bing.com. If you try to open that hyperlink, it gives you the error message:
Your organization's policies are preventing us from completing this actions for you.
The hyperlinks are all pointing to an internet address. As part of the approved list of applications, we have added iexplore.exe, google.exe, firefox.exe but we still get that error.
ASKER
Unfortunately, this case was not resolved 100%.
My thinking is that he is using the wrong tool for this. The blocking should be at the network level not the application level. Depending upon the budget something as basic as Net Nanny might be sufficient.