Error opening a signed item in a public folder

[Jim Watts]

Hi,

I have a problem where OutlookXP/2002 cannot open messages in Exchange2000
public folders if the message has a digitial certificate. It just results in
the error 'Can't Open This Item. You do not have suffient permission to
perform ths operation on this object.'

These public folders are email enabled, and the messages have been mailed to
them from OutlookXP/2002 rather than 'posted' They are digitally signed, but
not encrypted, with an inhouse certificate that is not trusted outside of
our organisation. I can read these signed messages using using Outlook
Express via IMAP, but not with Outlook using MAPI which makes me wonder if
it is an Outlook issue rather than an Exchange one. Can anybody give me some
pointers on this please?

Many thanks
--
Jim Watts,
Technology Consultant
Directories, Authentication and Border Security
Information Systems Services
University of Southampton

 

[Arnold Gao[MSFT]]

Hi Jim,

Thanks for your update!

According to your description, I understand that when trying to open
messages in public folder with digital signature, you get the error message
"Can't Open This Item. You do not have suffient permission to perform ths
operation on this object." If I have misunderstood your meaning, please do
let me know.

This issue may occur if you are using the Norton AntiVirus Corporate
Edition 7.5 or 7.51 snap-in from Symantec Corporation on your computer.

Please turn off the Norton AntiVirus Corporate Edition snap-in on your
computer or upgrade to Norton Antivirus Corporate Edition version 8.0. For
information about how to turn off the Norton Antivirus Corporate Edition
snap-in, contact Symantec Corporation.

I hope the information helps. Have a nice day!

Sincerely,

Arnold Gao

Microsoft Partner Online Support


Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via
your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and
confers no rights.

 

[Jim Watts]

Arnold,

According to your description, I understand that when trying to open
messages in public folder with digital signature, you get the error message
"Can't Open This Item....

Yes, thats correct. Opening an unsigned message/posting in a public folder
works fine, but trying to open a message that has a digital certificate
fails.

This issue may occur if you are using the Norton AntiVirus Corporate
Edition 7.5 or 7.51 snap-in from Symantec Corporation on your computer.

Thanks for the response. Sadly, we do not have Norton AntiVirus installed,
either on the clients or the Exchange server. We use Sophos Anti Virus, but
i've checked and the error still occurs, with or without Sopos installed.

Do you have any other pointers as to why signed messages cannot be opened?

Jim
--
Jim Watts,
Technology Consultant
Directories, Authentication and Border Security
Information Systems Services
University of Southampton

 

[Arnold Gao[MSFT]]

Hi Jim,

Thanks for your update!

Since you have not install Norton AV, I would like to confirm the following
points with you:

1. Does this issue occur on all digital signed mails or just the specific
one?
2. If the mail was sent to your personal mailbox rather than the public
folder, will the issue happen again?

Moreover, please make a screenshot description the error message and send
to (e-mail address removed) for further research.

Thank you for your time. Have a nice day!

Sincerely,

Arnold Gao

Microsoft Partner Online Support


Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via
your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and
confers no rights.

 

[Jim Watts]

Arnold,
Again, thanks for the response.

1. Does this issue occur on all digital signed mails or just the
specific one?

I've done some more investigation into this, and the situations in which it
fails are odd, but not that specific. It seems to fail if:

The client is OutlookXP/2002
The certificate is one of our internal generated ones, which is not trusted
by an industry standard web browser. However, we use Active Directory Group
Policy to send out the trust path, so all our machines do trust it.
The user does not have OWNER rights on the public folder.
I've tried from Outlook2000 and 2003 and they both work fine. One further
issue is that I've tested with two external certificates, one signed by
Thwarte which fails and one signed by GTE Cyber Trust Root which works fine.

2. If the mail was sent to your personal mailbox rather than the
public folder, will the issue happen again?

Sending mail using any of the cetificates I've tried always results in me
being able to read the message that arrives in my inbox.

Moreover, please make a screenshot description the error message and
send to xxx for further research.

I've send the screenshot, showing the result of trying to open the test
message. Note that the message I've sent is signed with my digital
certificate, so dragging it into a public folder should reproduce the error.

--
Jim Watts,
Technology Consultant
Directories, Authentication and Border Security
Information Systems Services
University of Southampton

 

[Arnold Gao[MSFT]]

Hello Jim,

I am now doing some research on this issue and will update this thread as
soon as possible.

Thank you for your patience! Have a nice day!

Sincerely,

Arnold Gao

Microsoft Partner Online Support


Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via
your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and
confers no rights.

 

[Arnold Gao[MSFT]]

Hell Jim,

After performing some deep research on this problem, I found it is a known
issue for Outlook 2002. We have noticed this problem and develop team is
testing a hotfix which should be released soon. However, we can not get it
fixed so far. In addition, I found two work around for you:

1. Assign the user Editor permission.
2. Reinstall Outlook 2002 RTM.

In order to resolve it, please regularly go to the Office update website
(http://office.microsoft.com/officeupdate/default.aspx?CTT=98) and wait for
the hotfix.

I hope the information helps. Have a nice day!

Sincerely,

Arnold Gao

Microsoft Partner Online Support


Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via
your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and
confers no rights.

 

[Jim Watts]

Arnold,

Thanks for your research here, and for letting me know that a patch is
coming.

Jim

 

[Arnold Gao[MSFT]]

Hi Jim,

You are welcome!

Please let us know if you have anything need assistance. ;-)

Have a nice day!

Sincerely,

Arnold Gao

Microsoft Partner Online Support


Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via
your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and
confers no rights.