“The publisher could not be verified”

[Edu-IT]

We've got a program that runs at logon from a share and we're seeing 'The publisher could not be verified' message when this tries to run. Looking around, this seems to be caused by one of the GP's but before I go ahead and follow the advice I've found, I want to be sure it's the right thing to do.

 

Is the below correct or is there something else to be doing?

 

You can disappear this message by setting the following Group Policy Object (GPO)

Go to User Configuration >> Administrative Templates >> Windows Components >> Attachement Manager and add “*.exe” to the “Inclusion list for moderate risk file types” setting.

 

[jmak]

Could you put the specific name of the program instead of *.exe in the GPO, so that if something malicious finds its way in you would get an alert?

[FishCustard]

Is your internal domain (e.g. whatever.internal) on the 'Trusted Sites' zone in IE - you can put it there with GP, but I'd try putting it there manually first to test.

[Edu-IT]

Is your internal domain (e.g. whatever.internal) on the 'Trusted Sites' zone in IE - you can put it there with GP, but I'd try putting it there manually first to test.

I'll check this out.

 

Thanks.

Edited August 9, 2013 by Edu-IT