Is the corresponding Registry value a type of reg_binary?  If so you can't
set it via an ADM. You would need to use an alternate method to update each
user's Registry like via a login script.

> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> Charlie Kaiser
> Sent: Friday, September 02, 2005 5:51 PM
> To: [email protected]
> Subject: [ActiveDir] Group policy security setting
> 
> This is driving me nuts....
> 
> I'm trying to set up a W2K3 SP1 terminal server machine, 
> managed by group policy, that will allow users to run certain 
> apps that actually load from another server. Here's the problem...
> 
> When I try and launch one of those apps, I get the security 
> warning box "open file - security warning" "Are you sure you 
> want to run this software?"
> I finally figured out how to disable it; in IE properties, 
> security, trusted sites, custom level, there's a setting: 
> "Launching applications and unsafe files". If I set that to 
> enable, the box goes away. (I'm using software restrictions 
> to only allow certain apps, so the warning box is irrelevant).
> 
> I want to be able to set this value via GP rather than 
> through the IE interface. The IE ADM template seems to 
> include every setting except for this one.
> 
> Why? I've tried creating a custom ADM for the setting, but 
> I'm getting nowhere with that. I'll probably try that again next week.
> But I'm curious why this particular setting is not available 
> in the template? Any ideas? Am I missing something?
> 
> **********************
> Charlie Kaiser
> W2K3 MCSA/MCSE/Security, CCNA
> Systems Engineer
> Essex Credit / Brickwalk
> 510 595 5083
> **********************
> List info   : http://www.activedir.org/List.aspx
> List FAQ    : http://www.activedir.org/ListFAQ.aspx
> List archive: 
> http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to