+ Post New Thread
Results 1 to 12 of 12
Windows 7 Thread, win 7 GPO issues in Technical; Im currently working through the GP settings getting them set for a win7 deploy to staff.. One thing I cant ...
  1. #1

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,521
    Thank Post
    1,333
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199

    win 7 GPO issues

    Im currently working through the GP settings getting them set for a win7 deploy to staff..

    One thing I cant figure out though, is trying to extract a zip file, the .exe gets blocked.. trying to download a .exe off the web it gets blocked (it says internet security settings blocked it), and even trying to run said .exe from a network share blocks it.

    Ive not set anything to block like this.. is it enabled by default? How can I disable it

  2. #2

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,521
    Thank Post
    1,333
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    Seems I can right click the .exe and choose Unblock.. But how can I disable this permanently. My win7 machine withough a GPO doesnt have this effect, but the laptop im playing with does, even though nothing has been set.

  3. #3

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,661
    Thank Post
    901
    Thanked 1,317 Times in 800 Posts
    Blog Entries
    1
    Rep Power
    444
    Hey,
    hmm interesting, normally by default I thought it was not blocked as such you just got an extra warning when you launch the exe but I did know you could do blocking like this.
    Try having a play with User Config->Admin Templates->Windows Components->Attachement Manager as I suspect that may be the GP place to control it but I have no idea tbh.
    A useful tip for GP management with a W7 client, you can now right click on say Admin Templates and filter the polices based on a search term

  4. #4

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,521
    Thank Post
    1,333
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    I put the ( ) part in my original post in the wrong place, that error message actually occurs when trying to run a previously downloaded exe.. When downloading one it just gets cancelled. Theres no AV installed on this image as we're just gonna push out sophos from the EMC after the imaging so its definately not that..

    Ill have a look into your suggestion in the morning. Thanks.

  5. #5

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,521
    Thank Post
    1,333
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    this is a right royal PITA. I really cant figure out what is causing these "Security Settings". Ive not set anything anywhere.

  6. #6

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,143
    Thank Post
    863
    Thanked 2,695 Times in 2,285 Posts
    Blog Entries
    9
    Rep Power
    772
    This should work:
    Vista Blocked File Protection Control

    In a GPO:
    Navigate to User Configuration > Administrative Templates > Windows Components > Attachment Manager. Here you will find a couple of policies related to this feature, but to disable it you'll want to ENABLE the policy called "Do not preserve zone information in file attachments".
    I think that this is a 'feature' that has been around for ages playing havoc as it usually does. I know it is in the forum somewhere but I think the integrated search only manages to go back about 3 months now. It is to do with IE security zones as above.

    Edit: just read above, ZH beat me to it Dosen't sound like it worked though.

    Edit2: Perhaps a screenshot may help
    Last edited by SYNACK; 9th February 2010 at 02:18 AM.

  7. #7

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,521
    Thank Post
    1,333
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    Even downloading through firefox just causes the download to halt immediately and a 0byte file to appear.

    Screenshot coming up...

  8. #8

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,521
    Thank Post
    1,333
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    see attached
    Attached Images Attached Images

  9. #9

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,143
    Thank Post
    863
    Thanked 2,695 Times in 2,285 Posts
    Blog Entries
    9
    Rep Power
    772
    What are the security settings for the internet zone in the Tools > Internet Options : Security Tab. On mine these are set to medium, I suspect that yours are at max.

    To test this try adding the download site to the local intranet zone temporarily and see if the download goes through then. If so it is something to do with the security levels in IE that are being set.

  10. #10

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,521
    Thank Post
    1,333
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    Ive set all security options to low and its still doing it. Also, I woudlnt have thought settings in IE would affect firefox as well?

  11. #11

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,143
    Thank Post
    863
    Thanked 2,695 Times in 2,285 Posts
    Blog Entries
    9
    Rep Power
    772
    If it is set as default in policy it will just override back to original settings hence the suggestion to add the site to local intranet zone. check to see if this is enabled:
    Select Internet Options
    Click on the Security tab
    Click on the Custom Level button
    Scroll down to Downloads: Automatic prompting for file downloads
    Click on Enable
    Click OK
    Also I would not think that it should affect firefox but the goal of the internet control pannel applet was always to control the entire internet experience for the user, perhaps they have extended its reach in 7.

    You could also try right clicking the IE icon and selecting run as administrator then try the security lowering as this is more likely to stick.

    On the weird side someone suggested this issue could be combatted with this patch When you try to download a file from the Internet by using Internet Explorer, the download stops responding

    Perhaps it might be a good idea to temporarily try the login with a fresh GPO and remove the other one to see if this is the cause.

    Edit: http://en.kioskea.net/forum/affich-4...-from-internet
    Last edited by SYNACK; 9th February 2010 at 04:15 AM.

  12. #12

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,521
    Thank Post
    1,333
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    Right that was wierd.

    Stripped it of all and every GPO and rebooted, multiple times.

    It was still happening.

    Deleted the profile (manually - had to follow the HOWTO to resolve that), and restarted.. problem gone..

    Re-apply the policy, and viola.. Its working like a charm.

    Question 1: Why didnt win7 reset itself after the policy was removed
    Question 2: Why did it screw up in the first place?

    Cheers Synack and ZH

SHARE:
+ Post New Thread

Similar Threads

  1. Win 2003 32-bit > Win 2008 R2 64-bit
    By Chuckster in forum Windows Server 2008 R2
    Replies: 10
    Last Post: 18th February 2010, 04:47 PM
  2. Getting external help; Win AD/GPO
    By steele_uk in forum Windows
    Replies: 4
    Last Post: 22nd November 2009, 10:40 AM
  3. Win 7 - 32 or 64 Bit
    By Paid_Peanuts in forum Windows 7
    Replies: 11
    Last Post: 7th August 2009, 05:37 PM
  4. Win Win Win!
    By WStore_Dan in forum Our Advertisers
    Replies: 2
    Last Post: 29th April 2009, 11:45 AM
  5. Win 2003
    By Chuckster in forum Windows
    Replies: 4
    Last Post: 28th August 2008, 10:49 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •