RE: Security Dialog Box



Hi Dan,

As you said, "This has been done at the root policy". Do you mean, you have
modified the "Default Domain Policy"? If so, I think the message shouldn't
appear any more. Let me know your current status.


Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
Thread-Topic: Security Dialog Box
thread-index: AcaOL1gSaWm8VUVRRtKdBtCsmw+CtA==
X-WBNR-Posting-Host: 163.153.164.1
From: =?Utf-8?B?RGFuaWVsIFAuIENheWVh?= <lyonadmiral@xxxxxxxxxxxxxxxx>
References: <123BC92F-F01F-47DB-828A-C4D8932D0B59@xxxxxxxxxxxxx>
<Vw5rCqEiGHA.5608@xxxxxxxxxxxxxxxxxxxxx>
<B40A4B90-34E5-4228-A89F-44E307EE3796@xxxxxxxxxxxxx>
<Iea6lwejGHA.4948@xxxxxxxxxxxxxxxxxxxxx>
Subject: RE: Security Dialog Box
Date: Mon, 12 Jun 2006 07:49:01 -0700
Lines: 193
Message-ID: <980BA5DD-C6E0-469C-B906-A7222E1783E8@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
Newsgroups: microsoft.public.windowsxp.general
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windowsxp.general:1522230
NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windowsxp.general

In the Group Policy editor, I have made the change in User
Configuration->Windows Settings->Internet Explorer Maintenance->Security,
I've added the IP of the server into the trust sites of the computer I am
importing settings from and have imported them into Group Policy. This
has
been done at the root policy, shouldn't now the machines stop showing
this
message? They are not in any OU and therefore they should get this
instruction, right?

TIA
Dan
--
Daniel P. Cayea
Capital Region BOCES NERIC
Peru Central School District


"Vincent Xu [MSFT]" wrote:

Hi,

Did you put all clients into a domain? If so, you can deploy the IE
settings in GPO. Otherwise, you have to do it manualy.

Check following information about GPO.


<http://technet2.microsoft.com/WindowsServer/en/Library/255ae89b-83c0-464d-a
42f-44795f1129641033.mspx?mfr=true>

Hope this helps.

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader
so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no
rights.
======================================================



--------------------
Thread-Topic: Security Dialog Box
thread-index: AcaLxgTHZc9Eg4NrTiStvIEx6mE4ag==
X-WBNR-Posting-Host: 163.153.164.1
From: =?Utf-8?B?RGFuaWVsIFAuIENheWVh?= <lyonadmiral@xxxxxxxxxxxxxxxx>
References: <123BC92F-F01F-47DB-828A-C4D8932D0B59@xxxxxxxxxxxxx>
<Vw5rCqEiGHA.5608@xxxxxxxxxxxxxxxxxxxxx>
Subject: RE: Security Dialog Box
Date: Fri, 9 Jun 2006 06:10:02 -0700
Lines: 102
Message-ID: <B40A4B90-34E5-4228-A89F-44E307EE3796@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
Newsgroups: microsoft.public.windowsxp.general
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windowsxp.general:1520846
NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windowsxp.general

That fixes the problem except I have to do it for every user who logs
on.
Is
there anyway I can make the change global for all users?

TIA
Dan
--
Daniel P. Cayea
Capital Region BOCES NERIC
Peru Central School District


"Vincent Xu [MSFT]" wrote:

Hi Daniel ,

According to my research, this is a function of the Attachment
Execution
Service presented in Internet Explorer Enhanced Security. This is a
user
side security feature that prompts users of downloaded application
if
they
want to run this application. It presents the user with information
about
the application including signature information to assist the
consumer
in
making an informed decision. This service only runs through the
Explorer
Shell. Applications that run in the Command Shell will bypass this
functionality.

To work around this problem, you may removed Internet Explorer
Enhanced
Security from Add/Remove Programs or add your network shares into
the
Local
intranet and domain name into the Trust sites. To do so:

1. Open Microsoft Internet Explorer.
2. Click Tools, and then click Internet Options.
3. In the Security tab, highlight "Local intranet", click Sites
button.
4. Add your network shares or address to the list.
5. Uncheck "Require server verification (https:) for all sites in
this
zone" and click Close.
6. In the Security tab, highlight "Trust sites", click Sites button.
7. Add your domain name (http://<domain>.com) to the list.
8. Click Close and reboot the server.

Hope this helps.

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your
newsreader
so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no
rights.
======================================================



--------------------
Thread-Topic: Security Dialog Box
thread-index: AcaGdO81XISkFimCRT+Thy56XYLFpw==
X-WBNR-Posting-Host: 163.153.164.1
From: =?Utf-8?B?RGFuaWVsIFAuIENheWVh?=
<lyonadmiral@xxxxxxxxxxxxxxxx>
Subject: Security Dialog Box
Date: Fri, 2 Jun 2006 11:47:01 -0700
Lines: 14
Message-ID: <123BC92F-F01F-47DB-828A-C4D8932D0B59@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
Newsgroups: microsoft.public.windowsxp.general
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windowsxp.general:1516986
NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windowsxp.general

I have some software that is being served up off of a Windows
2003
Standard
Edition Server. The executable is ran directly from the share
from
the
server. Before the program runs, you will see the "Open File -
Security
Warning Dialog Box" that says "The publisher could not be
verified.
Are
you
sure you want to run this software? Run or Cancel" This did not
happen
when
the software was being hosted on a Windows 2000 Server. Is there
anyway
I
can suppress this box from appearing on my users workstations?

TIA
Dan
--
Daniel P. Cayea
Capital Region BOCES NERIC
Peru Central School District








.