Prevented by a software restriction policy and double extentions

[Ken Franklin]

I'm not sure if this is an Outlook issue or a Windows issue. I know
it is not the Outlook Security Patch. I've been receiving report from
people who were unable to open files with a double extension -
myfile.xls.lnk for example. They are getting the error message:

"Windows cannot open this program because it has been prevented by a
software restriction policy. For more information, open Event Viewer
or contact your system administrator"

Everyone thought it was a result of the Outlook Security Patch but I
get the same error and I have the security patch turned off completely
- for example I can open .exe files and use a script to send e-mails.

Further investigation showed me that if I attempt to open a file with
a double extension from any directory with the format C:\Documents and
Settings\mylogin\Local Settings\Temporary Internet Files\OLK*, I get
the same restriction error. Does anyone know a workaround to this
problem? I checked with our admin and he hasn't set such a policy.

Thanks,

Ken Franklin

I did look in the Event View and here is the text of the warning. The
link they provided did not give any further information.

Access to C:\Documents and Settings\mylogin\Local Settings\Temporary
Internet Files\OLK52\Shortcut to 2004MarDocCnts xls.lnk has been
restricted by your Administrator by location with policy rule
{dda3f824-d8cb-441b-834d-be2efd2c1a33} placed on path C:\Documents and
Settings\yourlogin\Local Settings\Temporary Internet Files\OLK*

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

 

[Diane Poremsky]

That folder is protected by IE security settings. See if moving the secure
temp helps: http://www.outlook-tips.net/archives/20030828.htm. If not, save
the attachment then open.

 

[Doug Knox MS-MVP]

You may need to look at your Group Policy Software Restrictions.

http://www.virusbtn.com/files/johnlambert_vb2002.pdf