Re: Page with Mark of the Web not Trusted

From: Ramesh [MVP] (ramesh_at_nojunkmails.com@mvps.org)
Date: 12/29/04 

Date: Wed, 29 Dec 2004 22:40:11 +0530

Chris,

When you visit the site (that you've added to the Trusted Zone), do you see the Trusted sites icon in the status bar? 

-- 
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org
"Chris Green" <ChrisGreen@discussions.microsoft.com> wrote in message news:58270232-D65D-480D-8171-D94020EFB048@microsoft.com...
Unfortunately, neither of these are factors.  I have tried using the 
wildcard, and Require server verification is not on.  Like I said, if I add 
my domain to other zones (Restricted Zone, Local Machine Zone) then my pages 
will open in these zones correctly.  It is only Trusted Sites that is 
problematic.  Also, this only happens on XP/SP2.  Windows 2000 Server behaves 
correctly.
"Don Varnau" wrote:
> Hi,
> Two possibilities come to mind:
> In Trusted sites, "Require server verification" may need to be unchecked and
> listings in Trusted Sites may need to be wildcarded- ie.  "*.yahoo.com"
> instead of "weather.yahoo.com"
> 
> Or, renaming the pages from somewebpage.htm to somewebpage.hta should get
> them out of the Internet Zone.
> See: http://www.winxptutor.com/lmzunlock.htm
> http://msdn.microsoft.com/security/productinfo/XPSP2/securebrowsing/lockdown_devimp.aspx
> 
> Hope this helps,
> Don
> [MS MVP- IE/OE]
> 
> "Chris Green" <ChrisGreen[at]discussions.microsoft.com> wrote in message
> news:70B59345-5463-4A1A-9696-ACA3DDD2C4C0@microsoft.com...
> > I have been applying a "Mark of the web" to my online help pages to get
> > around the Local Machine Lockdown in SP2.  I would like to have these
> pages
> > to be opened using the Trusted zone, so I added the domain in the MotW to
> the
> > Internet Explorer Trusted Sites.  However, when I open the pages, they are
> > still opened using the Internet Zone security settings (the bottom right
> > corner of IE shows Internet zone).  I've even tried saving arbitrary
> Trusted
> > web pages to my local disk, and when I open them, they are opened using
> the
> > Internet Zone settings.
> >
> > Furthermore, if I added these domains to the Restricted Zone, then the
> > Restricted Zone settings are applied.  I've also tried REALLY simple html
> > pages with no refrences to any other page, but they still get don't get
> > opened in the Trusted zone.  This is really weird behavior.  Does anyone
> have
> > any ideas?
> 
>

Relevant Pages

  • RE: [Full-Disclosure] RE: COELACANTH: Phreak Phishing Expedition
    ... Yes in fact Trusted Sites and Intranet Sites ... privileges can be gained through this vulnerability. ... You can't replicate this with most other servers because the Host header ... security zone it should use to render the HTML. ...
    (Full-Disclosure)
  • Re: 0x800A1391
    ... Try adding the following sites to the IE Trusted Sites zone ... it's Patti MacLeod, MS-MVP. ... |>>> Add button next to the Add this Web site to the zone box to add the ...
    (microsoft.public.windowsupdate)
  • Re: IE URL obfuscation
    ... If you put www.microsoft.com in the Trusted Sites Zone, ... Internet Zone icon instead of the restricted sites zone icon. ... Same thing if you put it in www.zapthedingbat.com in Trusted Sites or Local ... code "NT1003" when registering to take the TICSA exam at www.2test.com. ...
    (NT-Bugtraq)
  • Re: Distribute Trusted Sites in IE to XP clients
    ... Mike's post with trying to do that with GPO I was thinking that the Trusted ... Sites zone was what I was trying to accomplish but instead I had been trying ... you can put sites in the Trusted Sites zone with GPO. ... >>> Unfortunately I have about 50 workstations and users roam a lot. ...
    (microsoft.public.windows.server.sbs)
  • Re: Project Guide requires trusted site?
    ... This isn't telling you that Project Server has to be in the trusted sites ... zone, it's telling you that the custom content must be. ... > custom content in our Project Guide. ...
    (microsoft.public.project.pro_and_server)