Re: Hyperlinks dont function after TS lockdown

Sounds like you are looking in the Security Log. Check the System
Log instead. These are the default EventIDs logged:

EventID 865
A user attempted to run software that is disallowed by the default
security level.

EventID 866
A user attempted to run software that is disallowed by a path rule.

EventID 867
A user attempted to run software that is disallowed by a
certificate rule.

EventID 868
A user attempted to run software that is disallowed by an Internet
zone rule or a hash rule.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?bXZhbmRlazI=?= <mvandek2@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote on 25 maj 2007 in
microsoft.public.windows.terminal_services:

I do see loggings but only login/logoff actions.
Do I need to adjust a setting somewhere?

"Vera Noest [MVP]" wrote:

Mmmm, yes, strange.
I'm not sure though which process writes to the logfile. Have
you checked the permissions on this file?
But you shouldn't need to enable advanced logging at all, the
normal logging is supposed to write an entry to the EventLog.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?bXZhbmRlazI=?= <mvandek2@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote on 21 maj 2007 in
microsoft.public.windows.terminal_services:

I tried to enable Advanced logging with the following command
but it does not give any output:

reg.exe add
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\
Cod eIdentifiers" /v LogFileName /d c:\saferlog.txt

You would expect some output in c:\saferlog.txt, right?

"Vera Noest [MVP]" wrote:

Check the EventLog to see what is denied.

Using Software Restriction Policies to Protect Against
Unauthorized Software
http://www.microsoft.com/technet/prodtechnol/winxppro/maintai
n/r str plcy.mspx
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?bXZhbmRlazI=?=
<mvandek2@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 21 maj 2007 in
microsoft.public.windows.terminal_services:

Hi,

I did a lock down including the software restriction
policy.

I allow excel.exe, winword.exe, outlook.exe and
iexplore.exe, they work fine. But when I click on a
hyperlink in Excel or Word I get a `This operation has
been cancelled due to restrictions in effect on this
computer. Please contact your system administrator.` error
message.

I use
Windows 2003 TS
MS Office XP

What other application do I need to give access to make
this work?

THanks in advance,

Mark
.

Relevant Pages

  • strange security event logs
    ... servers' security log since last year (way before I ... Failure Audit ... EventID 560 ...
    (microsoft.public.win2000.security)
  • Re: who deleted a user acct in AD
    ... You can check the EventLog on the DC. ... Look into the Security log: ... Category: Account Management ... Eventid: 630 ...
    (microsoft.public.windows.server.active_directory)
  • Re: Hyperlinks dont function after TS lockdown
    ... opening hyperlinks is still not possible. ... System Log instead. ... EventID 865 ... Using Software Restriction Policies to Protect Against ...
    (microsoft.public.windows.terminal_services)
Loading