Windows 7 - disabling 'Do you want to open...' dialog box when opening .lnk shortcuts

[mjgreen]

Hi all

When a user logs on to our windows 7 machines, their profile look ata location within the 'netlogon' shared folder which contains the desktop and start menu shortcuts (all local shortcuts are disabled)

Whenever a user tries to launch one of the shortcuts they are presented with the a warning 'do you want to open.......' (see attached file for the dialog box displayed)

Is there a way with GPO/registry to disable this warning for .lnk files on a UNC path?

Thanks

[Rich]

In Group Policy Editor navigate to User Configuration > Policies > Administrative Templates > Windows Components > Attachment Manager.
Edit the Policy "Inclusion list for low file types" and add *.lnk.

[mjgreen]

In Group Policy Editor navigate to User Configuration > Policies > Administrative Templates > Windows Components > Attachment Manager.
Edit the Policy "Inclusion list for low file types" and add *.lnk.

Thank you Rich, but tried that but it does not seem to help

[Rich]

See if running this script in conjunction with that group policy does the trick. It just sets your domain as part of the trusted zone. Make sure you change yourschoolhere.net to your domain.

Const HKEY_CURRENT_USER = &H80000001

strComputer = "."
 
Set objRegistry = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv")
 
strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\yourschoolhere.net"
objRegistry.CreateKey HKEY_CURRENT_USER, strKeyPath

strValueName = "*"' 
dwValue = 2
objRegistry.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, strValueName, dwValue

[AngryTechnician]

As Rich mentioned, you need to add the UNC server path to the Trusted Sites zone (or Intranet zone) in IE.

Windows Explorer shares its security zone settings with IE, and UNC paths are no longer automatically put into the Intranet zone. GPO has specific settings for this via the Site to Zone Assignment List in Administrative Templates\Windows Components\Internet Explorer\Security Features

[mjgreen]

Thank you very much for this Rich...I am having a little trouble trying to import it though. I saved it as '.reg' and tried to import it but not getting much luck.

What file type should I save it as in order to run this script?

See if running this script in conjunction with that group policy does the trick. It just sets your domain as part of the trusted zone. Make sure you change yourschoolhere.net to your domain.

Const HKEY_CURRENT_USER = &H80000001

strComputer = "."
 
Set objRegistry = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv")
 
strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\yourschoolhere.net"
objRegistry.CreateKey HKEY_CURRENT_USER, strKeyPath

strValueName = "*"' 
dwValue = 2
objRegistry.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, strValueName, dwValue

[machin05]

It looks like a Visual Basic script to me, so rename it to a *.vbs

[mjgreen]

still cannot get it to work

I dont know what I am doing wrong.

1.) I created a GPO
2.)I edited the GPo with the following setting: User Configuration > Policies > Administrative Templates > Windows Components > Attachment Manager.
Edit the Policy "Inclusion list for low file types" and add *.lnk.
3.)I added the 'Logon' script kindly supplied by Rich (made the changes to include our domain and also saved as .vbs) to the GPO
4.) I assigned the GPO to a relevent user group for testing.

But is still does not work

Can anyone think of anything I might be doing worng? could something be overriding the changes that the script makes?

.....going mad!

[mjgreen]

managed to sort it in the end..I am still not sure what I was doing wrong...but its working now!

thanks VERY much