Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Another cure for "Open File - Security Warning" Prompt Blues : ICACLS

12 Feb 2013   #1

Windows 7 Ultimate x64
Another cure for "Open File - Security Warning" Prompt Blues : ICACLS

I've been plagued with shortcuts that seem hellbent on making me want to turn off security settings in Windows 7 that are better left on.

Does this sound woefully familiar?

Well - here is THE CORRECT WAY (especially if the elusive "Unlock" option never presents itself - I certainly have never seen it on any property pages!)

Open an elevated command prompt window.

cd to your shortcut folder.

run the command:

C:\Users\YourName\Desktop\AFolder> icacls MyLink.lnk /L /SetIntegrityLevel med

You can use wildcards, but take care WHERE you do this. Also REMEMBER THE /L OPTION, because that ensures you are processing the shortcut, not the "addressed" program or file pointed to by the shortcut.

Note that the trick is in the (slightly counter-intutive) MEDIUM setting (med) rather than setting it LOW (which is what it often defaults to, thus causing the problem).

Personally, I like to create folders full of "themed" shortcuts on my desktop. Unfortunately, the default behaviour is that any shortcut moved to or created in such subfolders of the desktop(on my system at least) default to low integrity. You have to RAISE the integrity of the shortcuts to stop the endless tedious prompting.

If you cd to a folder full of shortcuts and further subfolders to that folder are also full of shortcuts, then using an asterisk (whilst potentially dangerous anywhere else) will update the ACLS for ALL the shortcuts - and apparently those in subfolders too (because such things are inherited via the folders by default). If that doesn't work for you, then cd down to the subfolder concerned and use the asterisk again.

Happy shortcutting!

My System SpecsSystem Spec
28 Apr 2013   #2

Windows 7 Professional x64


C:\>cd users
C:\Users>cd nigel
C:\Users\Nigel>cd desktop
C:\Users\Nigel\Desktop>icacls *.lnk /L /SetIntegrityLevel med
processed file: Microsoft Word 2010.lnk
processed file: Windows Live Mail.lnk
Successfully processed 2 files; Failed processing 0 files
It works!
My System SpecsSystem Spec
06 Jul 2013   #3

Windows 7 Ultimate x64
Finally! Thank you.

After installing Windows Server 2012 Essentials at home and joining a Windows 7 laptop to the domain with Folder Redirection and Offline Files enabled, I have spent days trying to find out why desktop shortcuts pointing to files on the server gave me the Open File warning. I could launch files from the Start Menu (which has been redirected to the server that contains the executables) but I could not launch them from the desktop (i.e., C:\Users\Public\Desktop\*.lnk pointing to a UNC). I've changed security settings on the local machine. I have changed group policies for local machine zone, intranet zone, and trusted site zone to no avail. I enabled launching unsafe executables. Nada. Ahhh, but one magic command line later...

So much frustration; such a simple fix. I suppose I need to go back and remove the Zone customizations to make sure it wasn't a combo solution rather than one magic bullet, but at least I now have an existence proof that it's possible.

I felt obliged to register at the site in order to say Thank You. So, "Thank you for posting this solution!"
My System SpecsSystem Spec

06 Jul 2013   #4
Layback Bear

Windows 7 Pro. 64/SP-1

Thank you Papoon for joining our great Forum.
Happy you got the answer you were looking for.
Hang around and do some looking because their are bunches of great information can be gathered here.
I must warn you this Forum can be addictive.
Happy computing
Layback Bear
My System SpecsSystem Spec
07 Jul 2013   #5

Windows 7 Professional x64

The problem I have found with this solution is that I often use the Desktop as a workspace, clearing it away later. So any new files don't get updated in this way. What I'd really like is to turn on this "feature".
My System SpecsSystem Spec
07 Jul 2013   #6

Windows 7 Ultimate x64

Untested observations follow: My subsequent reading on file integrity in Windows implicates Internet Explorer running in Protected Mode. I haven't experienced the problems you describe but I tend to use Chrome instead of IE so I don't think files saved to my Desktop would get marked with low integrity. If you're not using protected mode IE to create those desktop files I have even less to suggest. Maybe you could use icacls to explicitly set file integrity on the Desktop folder(s) to medium and make that inheritable. It seems possible, but I've not thought through the security consequences of doing so.
My System SpecsSystem Spec
02 May 2016   #7

Win 7 Pro x64

Like Papoon, I registered just to say THANK YOU.
My System SpecsSystem Spec
03 Jun 2016   #8

Windows 7
Another way to deal with Integrity Levels (chml)

Old thread but another thanks to BigAlUK for his post! The option to set Integrity Levels (IL) to medium
icacls FileOrFolder /L /SetIntegrityLevel med
is so much better than the many other various recommendations to disable the security prompts. Changing IL levels actually fixes the issue instead of just masking it. (well, for the most part that is ... don't know what exactly causes this bit to get set in the first place other than as Papoon stated, think it is related to Internet Explorer running in protected mode)

With that said... there is another way to get the exact same result that I haven't read about in any forum or posts relating to these security prompts. It works when dealing with folders or files that are not themselves within another folder that has an IL set to low (an explicit IL set). The icalcs option above sets an IL to low, but how about we just remove the IL all together and return the folder back to its original state! This might be considered a "cleaner" way of doing it, though I haven't found how without a 3rd party program. Good news is that there is a free, simple, small, and from a trustworthy source way to remove an IL.

Grab chml.exe from and from command prompt run:
chml PathToFolderOrFile -rl
<Side Note>It's written by the "famous" Mark Minasi (at least from my day, learned a lot from him) of the "Mastering Windows xxx" series of books.</Side Note> You do need to be an an administrator to run this command if I understand correctly. (the "rl" stands for "remove label" and chml stands for "change mandatory label" using Vista-era naming)

I've ran across several machines in the past at my school district that started displaying the warning boxes when dealing with files on the Desktop folder (including shortcuts). Sure enough,
icacls Desktop
showed the folder had a Mandatory Integrity Label of Low set. A quick
chml desktop -rl
took care of the problem, no more security prompts! It had been awhile since I had figured out this solution when I ran into it again today. I had actually forgotten how I had fixed it and had to so some digging again. So, this post is partially for my own benefit but also hoping it might be useful for someone else as well.
My System SpecsSystem Spec
04 Jun 2016   #9

Windows 7 Ultimate x64

Thanks people for all the positive feedback - kinda makes my day, no matter how old the original post And thanks for the further enlightenments on the subject, too!
My System SpecsSystem Spec

 Another cure for "Open File - Security Warning" Prompt Blues : ICACLS

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar help and support threads
Thread Forum
changing an ".ost"file to open with "unknown" application
I changed my outlook email .ost file to open with auto cad by mistake. Initially it was opening with an Unknown application. How can I enable it to open with an unknown application again? please help
"Open File - Security Warning" when running a LNK file
Ever since I started using Windows Live Mail, I get the following every time I start it: How do I stop this?
General Discussion
How to get rid of "Open file - security warning"
Hello. I am using 7100 build and I would like to know, how to forever get rid of the "Open file - security warning" dialog. It is of no use and it certainly does not help with security, it just annoys... thanks :)
System Security
Adding "Open Command Prompt" Option
Hey guys, I know there's a way to add a "Open command window here" when you click ON a folder... but what I'm curious about is if there's a way to do that if you're IN a folder. It never made sense to me, if I want to run a command-line utility like ffmpeg on a file, to have to go up a folder,...
Pressing any keyboard button = url.dll "open with prompt"
Hello, Today I was sick and tired of Firefox 3.6 because it kept having mini freezes every few minutes and reinstalling it didn't fix it so I decided to try Opera which I didn't like for missing out a couple of features I can't live without, removed that and tried Chrome which reminded me of the...
Performance & Maintenance
Windows 7 32 bit, when loading "Open With: ?" "File: Media" comes up
Hello there, when the desktop loads up, I get this strange message: "Open With: Choose the program you want to use to open this file: File: Media"

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 21:13.

Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App