Hi Charlie,

If it is a user registry setting (other than Binary) there should be no
problem with a custom ADM template.

Can you explain what registry key it is and exactly what is not working?

Alan Cuthbertson

----- Original Message ----- 
From: "Charlie Kaiser" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Saturday, September 03, 2005 8:51 AM
Subject: [ActiveDir] Group policy security setting


This is driving me nuts....

I'm trying to set up a W2K3 SP1 terminal server machine, managed by
group policy, that will allow users to run certain apps that actually
load from another server. Here's the problem...

When I try and launch one of those apps, I get the security warning box
"open file - security warning" "Are you sure you want to run this
software?"
I finally figured out how to disable it; in IE properties, security,
trusted sites, custom level, there's a setting: "Launching applications
and unsafe files". If I set that to enable, the box goes away. (I'm
using software restrictions to only allow certain apps, so the warning
box is irrelevant).

I want to be able to set this value via GP rather than through the IE
interface. The IE ADM template seems to include every setting except for
this one.

Why? I've tried creating a custom ADM for the setting, but I'm getting
nowhere with that. I'll probably try that again next week.
But I'm curious why this particular setting is not available in the
template? Any ideas? Am I missing something?

**********************
Charlie Kaiser
W2K3 MCSA/MCSE/Security, CCNA
Systems Engineer
Essex Credit / Brickwalk
510 595 5083
**********************
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to