S
Steele
I have a Windows Server 2003 R2 Terminal Server, and have a pretty
restrictive GPO applied to it. The users are restricted from most system
tasks, and I set "Run only allowed Windows applications" under User
Configuration\Administrative Templates\System. I have a list of .exe files
set that they are able to run, and they are prevented from running anything
else.
MS Office 2003 is installed on this Terminal Server and the users are able
to launch all of those applications. This was working fine for awhile, but
after we installed some Microsoft Updates earlier this year, we found that
users could not click on links in the Outlook email messages and open files
off of their mapped drives. For example, if a user has a hyperlink in their
email message to G:\CustomerFolder\Customer1.xls, they are not able to click
on it and open it directly. However, if they browse to that location through
Windows Explorer or MS Excel, they can open the file without any problems.
If I set the "Run only allowed Windows applications" to "Not configured",
the users no longer have any problems opening the links, so I think there
might be something in there that I need to change, but I haven't been able
to figure out what. I've tried adding G:\*.*, \\server\share, file://server,
and even the full path to one of the files that we're trying to open, but
that doesn't seem to work.
Does anyone have any suggestions on how I can open this up so that the users
can just click on the links?
restrictive GPO applied to it. The users are restricted from most system
tasks, and I set "Run only allowed Windows applications" under User
Configuration\Administrative Templates\System. I have a list of .exe files
set that they are able to run, and they are prevented from running anything
else.
MS Office 2003 is installed on this Terminal Server and the users are able
to launch all of those applications. This was working fine for awhile, but
after we installed some Microsoft Updates earlier this year, we found that
users could not click on links in the Outlook email messages and open files
off of their mapped drives. For example, if a user has a hyperlink in their
email message to G:\CustomerFolder\Customer1.xls, they are not able to click
on it and open it directly. However, if they browse to that location through
Windows Explorer or MS Excel, they can open the file without any problems.
If I set the "Run only allowed Windows applications" to "Not configured",
the users no longer have any problems opening the links, so I think there
might be something in there that I need to change, but I haven't been able
to figure out what. I've tried adding G:\*.*, \\server\share, file://server,
and even the full path to one of the files that we're trying to open, but
that doesn't seem to work.
Does anyone have any suggestions on how I can open this up so that the users
can just click on the links?