We are testing IE 8 in our lab environment. The update from IE7 to IE8 went
without any major incidents. However ever since the first reboot past the
install the two test systems (Windows XP, SP3, 32Bit) that we installied it
on now pop-up a "Open File - Security Warning" dialog for each executable on
the local system. The only exception to the rule is the IE8 itself. This
means for example that any auto run program prompts a dialog to confirm that
it is OK to execute it. Or if for example the command prompt should be
opened another confirmation is required.

Can anybody tell me what this feature is and how to turn it off? It seems
to be profile specific since when we login to the same system with another
user account other than the one used to do the update of IE, these pop-ups
don't seem to show.

Again, this system did not show this behaviour prior to the update (it was
running IE7 and XP SP3).

Thank you.

Hello Robear,

Thank you for taking the time to read and respond to my post. I checked
that the IE advanced setting to allow active content to run int files on my
computer is set. This is (and was) the case.

I would like to express again - The environment in which the computer is
running has not changed. The computer was running IE7 on Windows XP SP3.
The only change was the IE8 update. Ever since that update the computer
verifies all executables and brings up the open file security warning. This
applies to all programs even if the IE is not running. So during a startup
of the system, there will be roughly 15 of the the open file security warning
messages just to finish the start up/login process of a user login.

Since the system did not show this phenomenon with IE7, it seems to be
something that IE8 introduced. So what other cause could there be (besides
the "Allow active content to run in files on my computer" option)?

Thanks,

Mike

"PA Bear [MS MVP]" wrote:

> This is not new in IE8. Installed properly, your IE7 settings should not
> have changed in IE8.
>
> See the section "Internet Explorer Local Machine Zone Lockdown" here:
> http://technet.microsoft.com/en-us/l...7150.aspx#EHAA
>
> Options include:
>
> - Give each local page the "Mark of the Web" =>
> http://msdn2.microsoft.com/en-us/library/ms537628.aspx
>
> - IE Tools | Internet Options | Advanced | Security | Allow active content
> to run in files on My Computer => check/enable & reboot, with the full
> understanding that you'll be giving up some of the enhanced security
> afforded by Local Machine Zone Lockdown.
>
> [most of the above courtesy of MVP Don Varnau]
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> Mike wrote:
> > We are testing IE 8 in our lab environment. The update from IE7 to IE8
> > went
> > without any major incidents. However ever since the first reboot past the
> > install the two test systems (Windows XP, SP3, 32Bit) that we installied
> > it
> > on now pop-up a "Open File - Security Warning" dialog for each executable
> > on
> > the local system. The only exception to the rule is the IE8 itself. This
> > means for example that any auto run program prompts a dialog to confirm
> > that
> > it is OK to execute it. Or if for example the command prompt should be
> > opened another confirmation is required.
> >
> > Can anybody tell me what this feature is and how to turn it off? It seems
> > to be profile specific since when we login to the same system with another
> > user account other than the one used to do the update of IE, these pop-ups
> > don't seem to show.
> >
> > Again, this system did not show this behaviour prior to the update (it was
> > running IE7 and XP SP3).
> >
> > Thank you.
>
>

This is not new in IE8. Installed properly, your IE7 settings should not
have changed in IE8.

See the section "Internet Explorer Local Machine Zone Lockdown" here:
http://technet.microsoft.com/en-us/l...7150.aspx#EHAA

Options include:

- Give each local page the "Mark of the Web" =>
http://msdn2.microsoft.com/en-us/library/ms537628.aspx

- IE Tools | Internet Options | Advanced | Security | Allow active content
to run in files on My Computer => check/enable & reboot, with the full
understanding that you'll be giving up some of the enhanced security
afforded by Local Machine Zone Lockdown.

[most of the above courtesy of MVP Don Varnau]
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/


Mike wrote:
> We are testing IE 8 in our lab environment. The update from IE7 to IE8
> went
> without any major incidents. However ever since the first reboot past the
> install the two test systems (Windows XP, SP3, 32Bit) that we installied
> it
> on now pop-up a "Open File - Security Warning" dialog for each executable
> on
> the local system. The only exception to the rule is the IE8 itself. This
> means for example that any auto run program prompts a dialog to confirm
> that
> it is OK to execute it. Or if for example the command prompt should be
> opened another confirmation is required.
>
> Can anybody tell me what this feature is and how to turn it off? It seems
> to be profile specific since when we login to the same system with another
> user account other than the one used to do the update of IE, these pop-ups
> don't seem to show.
>
> Again, this system did not show this behaviour prior to the update (it was
> running IE7 and XP SP3).
>
> Thank you.

Mike, I think it'd be best if I handed you over to...

No-charge support for Internet Explorer 8 installation, set-up and usage
(only) is available via the phone based on your locale through 31 December
2009. Customers must be running Windows XP or Windows Vista in a non-domain
environment. US & CA Residents: 866-234-6020. Other:
https://support.microsoft.com/oas/de...px?&prid=13043

Let us know how you make out, please.

Mike wrote:
> Hello Robear,
>
> Thank you for taking the time to read and respond to my post. I checked
> that the IE advanced setting to allow active content to run int files on
> my
> computer is set. This is (and was) the case.
>
> I would like to express again - The environment in which the computer is
> running has not changed. The computer was running IE7 on Windows XP SP3.
> The only change was the IE8 update. Ever since that update the computer
> verifies all executables and brings up the open file security warning.
> This
> applies to all programs even if the IE is not running. So during a
> startup
> of the system, there will be roughly 15 of the the open file security
> warning messages just to finish the start up/login process of a user
> login.
>
> Since the system did not show this phenomenon with IE7, it seems to be
> something that IE8 introduced. So what other cause could there be
> (besides
> the "Allow active content to run in files on my computer" option)?
>
> Thanks,
>
> Mike
>
> "PA Bear [MS MVP]" wrote:
>
>> This is not new in IE8. Installed properly, your IE7 settings should not
>> have changed in IE8.
>>
>> See the section "Internet Explorer Local Machine Zone Lockdown" here:
>> http://technet.microsoft.com/en-us/l...7150.aspx#EHAA
>>
>> Options include:
>>
>> - Give each local page the "Mark of the Web" =>
>> http://msdn2.microsoft.com/en-us/library/ms537628.aspx
>>
>> - IE Tools | Internet Options | Advanced | Security | Allow active
>> content
>> to run in files on My Computer => check/enable & reboot, with the full
>> understanding that you'll be giving up some of the enhanced security
>> afforded by Local Machine Zone Lockdown.
>>
>> [most of the above courtesy of MVP Don Varnau]
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.net/
>>
>>
>> Mike wrote:
>>> We are testing IE 8 in our lab environment. The update from IE7 to IE8
>>> went
>>> without any major incidents. However ever since the first reboot past
>>> the
>>> install the two test systems (Windows XP, SP3, 32Bit) that we installied
>>> it
>>> on now pop-up a "Open File - Security Warning" dialog for each
>>> executable
>>> on
>>> the local system. The only exception to the rule is the IE8 itself.
>>> This
>>> means for example that any auto run program prompts a dialog to confirm
>>> that
>>> it is OK to execute it. Or if for example the command prompt should be
>>> opened another confirmation is required.
>>>
>>> Can anybody tell me what this feature is and how to turn it off? It
>>> seems
>>> to be profile specific since when we login to the same system with
>>> another
>>> user account other than the one used to do the update of IE, these
>>> pop-ups
>>> don't seem to show.
>>>
>>> Again, this system did not show this behaviour prior to the update (it
>>> was
>>> running IE7 and XP SP3).
>>>
>>> Thank you.

Hello Robear,

Thank you for taking the time to read and respond to my post. I checked
that the IE advanced setting to allow active content to run int files on my
computer is set. This is (and was) the case.

I would like to express again - The environment in which the computer is
running has not changed. The computer was running IE7 on Windows XP SP3.
The only change was the IE8 update. Ever since that update the computer
verifies all executables and brings up the open file security warning. This
applies to all programs even if the IE is not running. So during a startup
of the system, there will be roughly 15 of the the open file security warning
messages just to finish the start up/login process of a user login.

Since the system did not show this phenomenon with IE7, it seems to be
something that IE8 introduced. So what other cause could there be (besides
the "Allow active content to run in files on my computer" option)?

Thanks,

Mike

"PA Bear [MS MVP]" wrote:

> This is not new in IE8. Installed properly, your IE7 settings should not
> have changed in IE8.
>
> See the section "Internet Explorer Local Machine Zone Lockdown" here:
> http://technet.microsoft.com/en-us/l...7150.aspx#EHAA
>
> Options include:
>
> - Give each local page the "Mark of the Web" =>
> http://msdn2.microsoft.com/en-us/library/ms537628.aspx
>
> - IE Tools | Internet Options | Advanced | Security | Allow active content
> to run in files on My Computer => check/enable & reboot, with the full
> understanding that you'll be giving up some of the enhanced security
> afforded by Local Machine Zone Lockdown.
>
> [most of the above courtesy of MVP Don Varnau]
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> Mike wrote:
> > We are testing IE 8 in our lab environment. The update from IE7 to IE8
> > went
> > without any major incidents. However ever since the first reboot past the
> > install the two test systems (Windows XP, SP3, 32Bit) that we installied
> > it
> > on now pop-up a "Open File - Security Warning" dialog for each executable
> > on
> > the local system. The only exception to the rule is the IE8 itself. This
> > means for example that any auto run program prompts a dialog to confirm
> > that
> > it is OK to execute it. Or if for example the command prompt should be
> > opened another confirmation is required.
> >
> > Can anybody tell me what this feature is and how to turn it off? It seems
> > to be profile specific since when we login to the same system with another
> > user account other than the one used to do the update of IE, these pop-ups
> > don't seem to show.
> >
> > Again, this system did not show this behaviour prior to the update (it was
> > running IE7 and XP SP3).
> >
> > Thank you.
>
>

Hello Robear,

Thank you for taking the time to read and respond to my post. I checked
that the IE advanced setting to allow active content to run int files on my
computer is set. This is (and was) the case.

I would like to express again - The environment in which the computer is
running has not changed. The computer was running IE7 on Windows XP SP3.
The only change was the IE8 update. Ever since that update the computer
verifies all executables and brings up the open file security warning. This
applies to all programs even if the IE is not running. So during a startup
of the system, there will be roughly 15 of the the open file security warning
messages just to finish the start up/login process of a user login.

Since the system did not show this phenomenon with IE7, it seems to be
something that IE8 introduced. So what other cause could there be (besides
the "Allow active content to run in files on my computer" option)?

Thanks,

Mike

"PA Bear [MS MVP]" wrote:

> This is not new in IE8. Installed properly, your IE7 settings should not
> have changed in IE8.
>
> See the section "Internet Explorer Local Machine Zone Lockdown" here:
> http://technet.microsoft.com/en-us/l...7150.aspx#EHAA
>
> Options include:
>
> - Give each local page the "Mark of the Web" =>
> http://msdn2.microsoft.com/en-us/library/ms537628.aspx
>
> - IE Tools | Internet Options | Advanced | Security | Allow active content
> to run in files on My Computer => check/enable & reboot, with the full
> understanding that you'll be giving up some of the enhanced security
> afforded by Local Machine Zone Lockdown.
>
> [most of the above courtesy of MVP Don Varnau]
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> Mike wrote:
> > We are testing IE 8 in our lab environment. The update from IE7 to IE8
> > went
> > without any major incidents. However ever since the first reboot past the
> > install the two test systems (Windows XP, SP3, 32Bit) that we installied
> > it
> > on now pop-up a "Open File - Security Warning" dialog for each executable
> > on
> > the local system. The only exception to the rule is the IE8 itself. This
> > means for example that any auto run program prompts a dialog to confirm
> > that
> > it is OK to execute it. Or if for example the command prompt should be
> > opened another confirmation is required.
> >
> > Can anybody tell me what this feature is and how to turn it off? It seems
> > to be profile specific since when we login to the same system with another
> > user account other than the one used to do the update of IE, these pop-ups
> > don't seem to show.
> >
> > Again, this system did not show this behaviour prior to the update (it was
> > running IE7 and XP SP3).
> >
> > Thank you.
>
>