Setting HKCU register permissions

[Joris Kemperman]

Hi everyone,

I have the following setup:
1 domaincontroller, Windows 2003.
1 Terminalserver, Windows 2003 with Office 2003.

I have the following problem:
In Outlook, when a message with an attachment (for example .doc) arrives,
i'm unable to open the file. I have to save it first in order to open it.

What I want to archieve:
I want to have the ability to immidiately open the document instead of
saving it first.


I've noticed that this behaviour is caused by a registry setting at
HKCU\Software\Microsoft\Policies\Office\11.0\Outlook\Security, called
Level1Remove. When i delete this string the problem is solved, but; the user
needs rights to delete that string, normally only administrators can edit
this setting.

What i did:
Add an Registery GPO that applies to the path above, giving everyone full
rights to change the key, however, the permissions are NOT applied! When i
create an Registery GPO (for example) at HKLM, the permissions get applied
immidiately!

Why are the permissions not applied? Can anyone help me out?

Best Regards,
Joris Kemperman

 

[Mark Heitbrink [MVP]]

I've noticed that this behaviour is caused by a registry setting at
HKCU\Software\Microsoft\Policies\Office\11.0\Outlook\Security, called
Level1Remove. When i delete this string the problem is solved, but; the user
needs rights to delete that string,

No, wrong HIVE. \Policies is a secured one, where only Admins
can delete, thats the reason, why group policies as secure, compared
to system policies in NT4.

Deletion is not the way to solve it. Configuring the Level1Remove
entry by ADM template is the solution.

--- MailAttachments.adm ---
; Cannot open attachments in Microsoft Outlook
; http://support.microsoft.com/kb/829982

CLASS USER

CATEGORY "Mail Attachments"
POLICY "Enable Level 1 attachements in Outlook 2003"
KEYNAME "Software\Policies\Microsoft\Office\11.0\Outlook\Security"
PART "Set file extension" COMBOBOX
VALUENAME "Level1Remove"
SUGGESTIONS ".mdb;.hlp;.zip;.pdf"
END SUGGESTIONS
END PART
END POLICY
POLICY "Disable Level 1 attachments in Outlook 2003"
KEYNAME "Software\Policies\Microsoft\Office\11.0\Outlook\Security"
PART "Set file extension" COMBOBOX
VALUENAME "Level1Add"
SUGGESTIONS ".ocx;.dll;.exe;.vbs;.bat,.scr"
END SUGGESTIONS
END PART
END POLICY
END CATEGORY

--- MailAttachments.adm ---

Mark