Shawn,

Here is what I think:

-If you want to centrally manage what attachments that your clients can open
and what they can't then setting up the "back-end" of the Outlook Security
Update would be the optimal way to do that (since you are now running
Outlook with the security patch).  Microsoft was taking a lot of heat around
the time the security update was release because of a number of viruses that
were being targeted at their Outlook application and they tried to provide a
way to allow administrators to manage what attachments their clients can
open.  Is it pretty?  No.  Does it work?  I don't know because I read what
the security patch did before installing it (or pushing it out to my
clients) and decided that there were better ways in my environment to
accomplish this.  

-If you want to give your users control of what to block and what not to
block then head on over to
http://www.slipstick.com/outlook/esecup/getexe.htm#ol2002 (or just go to
http://www.slipstick.com) and look for the Outlook COM add-in.  It says it's
only for Outlook 2002, but I think it will work with Outlook 2000 but I am
not sure.  Then install it on a test machine (or your own) and then go to
Tools-->Options-->Attachment Security Options.

There are some people that think people shouldn't be transferring files via
email to begin with (isn't that what FTP is for? :-)).  Either way MS did
provide us with a way to manage it centrally (for those of us who needed to
push out the update).  If you have pushed out SP2 already to your clients
then option 1 seems to be your best bet (next to doing either reg editing or
setting up a .reg file and putting it on a share so people can just import
the entry themselves (or use SMS if you have it)).  If that does not work
for you then browse around www.slipstick.com and look at it's various
articles\docs on the matter.  I am sure you will find something useful.

Best Regards,

Steve

-----Original Message-----
From: Shawn Connelly [mailto:[EMAIL PROTECTED]] 
Sent: Friday, November 02, 2001 4:46 PM
To: Exchange Discussions
Subject: Outlook blocked access to the following potentially unsafe attach
ments


Since patching Outlook 2000 with SP2 a while ago, most/all attachments are
now completely blocked.   

I received a very important program update (an .exe) from our Anti-Virus
software supplier and I can't even access it.

The msg. is: "Outlook blocked access to the following potentially unsafe
attachments"

First MS allows anything to get though such as asp, wsh, vba, etc. code now,
they have just blanket-blocked every possible attachment type with no clear
retrieval method. 

I've looked at
http://support.microsoft.com/support/kb/articles/Q262/6/31.ASP and
http://support.microsoft.com/support/kb/articles/Q263/2/97.ASP
which contain a lot of nonsense about modifying registries, adding a
security setting folder, et cetera....

Is this the only way?

I don't allow access to the client's registry and I'm not so keen about
having to modify the registries on every computer in this company.

They couldn't spend the time to fix the way certain files interact with
their 'Swiss Cheese' code so they, instead, Disabling attachments
altogether? 

What a really stupid (typically Microsoft) band-aid solution!!   

Doesn't anyone ever just get fed up with how MS solves 'their' security
problems?  

It seems to me that email attachments should be an essential function of any
email program.   

I did eventually pick up the anti-virus file through my other email server,
which is a Group Wise 5 test server! 

Shawn


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to