abcd said:
I am asking about Outlook.
Our setting is already to restricted zones. But some machines with
this setting shows the applet where as other machines dont show the
applet....
Local intranet setting is medium-low for all machines...
You state that Outlook is configured to use the Restricted Sites
security zone. But then you start discussing the settings for the
intranet security zone. The Local Intranet security zone has far fewer
restrictions, by default, than the Restricted Sites security zone (which
should, by default, be set to the High level). If Outlook is configured
to use the Restricted Sites security zone, it doesn't matter whatever
settings you have in the other security zones since those aren't the
ones under which the HTML-formatted e-mail gets rendered. In fact, you
don't get to choose the Local Intranet security zone for Outlook. The
only choices are the Restricted Sites and the Internet security zones.
The Local Intranet security zone isn't even a choice so stop trying to
customize that zone when it won't get used. The security zone used by
Outlook is NOT decided based on some IP address within the e-mail's
headers pretending to be from a host inside your network.
When using the Restricted Sites security zone (at its High level),
applets won't run within Outlook, nor will ActiveX, Javascript, and
other HTML nasties. If some users are getting Java applets to run when
using the Restricted Sites security zone then they have opted to lower
the settings for that zone; i.e., those users had to change from
blocking Java applets to allowing them - an unwise choice. They should
always use the Restricted Sites security zone, and that obviates using
any link to an applet that you want to push at them. If they are
reducing their security settings within a zone, they could effectively
turn the Restricted Sites zone to be even more loose than the Internet
zone is by default.
If you want your e-mail recipients to use your Java applet, run a web
server and provide a link to a page there within your e-mails. Users
can then decide if they will click on your link, visit your page within
a browser (that would then be using the Internet security zone), and
then download your applet. Of course, if Java has been disabled in the
browser's advanced settings or isn't supported then they still won't be
able to retrieve and run your applet.
