Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Help Classic Menu - Shortcuts attributes - BIG mistake

08 Dec 2009   #11
ElQuia

Windows 7 x64 SP1 - Ubuntu 10.10 x64 - Linux Mint 10 (dual boot + Virtual Box)
 
 

Brink, nope, doesnt work. I created a new account as a power user. When logging on to it, all shortcuts show the security warning.

Remember the warning is shown when activating an "all users start menu" shotrcut, when activating a <my user name> shortcut it does not happen.
It must be something to do with ownership or permissions or security in "C:\ProgramData\Microsoft\Windows\Start Menu" and subfolders. I have the folder "C:\ProgramData\Microsoft\Windows\Start Menu\Programs" copied on other drive and when running the shortcut from there the warning does not show. Or something in the registry or .... arrghhh ... don't know and it vexes me !


My System SpecsSystem Spec
.
08 Dec 2009   #12
Ivo

Windows 7 Home 64, Vista Ultimate 64
 
 

I don't know the specifics of your problem, but maybe this tool can help? Download details: SubInACL (SubInACL.exe)
It is an MS tool that can do mass ACL changes.
My System SpecsSystem Spec
09 Dec 2009   #13
ElQuia

Windows 7 x64 SP1 - Ubuntu 10.10 x64 - Linux Mint 10 (dual boot + Virtual Box)
 
 

Ivo, thanks. Will this work on 7 x64?, Where can I find some sort of readme or instructions?.
The problem is it must be some kind of wrong permisions or whatever on the All Users Start Menu Folder. But I don´t know what the problem is. If this tool can copy permisions or attributes or signer from another pc maybe that would solve it.,..

Ideas?
My System SpecsSystem Spec
.

09 Dec 2009   #14
tweaker

w7-64, w2k
 
 

Maybe you could try installing VirtualBox (free) and make a clean win7 install in that, then you can compare folder and .lnk settings side-by-side between yours and a clean win7.

edir: you could also experiment with that SinInACL tool in there without being afraid to break anything
My System SpecsSystem Spec
09 Dec 2009   #15
ElQuia

Windows 7 x64 SP1 - Ubuntu 10.10 x64 - Linux Mint 10 (dual boot + Virtual Box)
 
 

tweaker, I'm stupid. I use VBox to test a lot of distros. Should have come up with that idea .
Well thanks, will do and try.
Maybe also copy my actual all users programs to vbox and see what happens also.
My System SpecsSystem Spec
09 Dec 2009   #16
reghakr

Windows 7 Pro & Vista Home Premium
 
 

Maybe insatlling this will over ride what you have done..

It is free and open source. I just added it to Source Forge: http://classicshell.sourceforge.net/
and Code Project: http://www.codeproject.com/KB/shell/classicshell.aspx
My System SpecsSystem Spec
09 Dec 2009   #17
Ivo

Windows 7 Home 64, Vista Ultimate 64
 
 

Quote   Quote: Originally Posted by ElQuia View Post
Ivo, thanks. Will this work on 7 x64?, Where can I find some sort of readme or instructions?.
The problem is it must be some kind of wrong permisions or whatever on the All Users Start Menu Folder. But I don´t know what the problem is. If this tool can copy permisions or attributes or signer from another pc maybe that would solve it.,..

Ideas?
Yes, I think it will work on 7 x64. But I don't know much how to use it. I found it in some forum post that had a script for taking ownership of registry keys. I used the provided batch files and didn't try to understand exactly what they do.

Quote   Quote: Originally Posted by reghakr View Post
Maybe insatlling this will over ride what you have done..

It is free and open source. I just added it to Source Forge: http://classicshell.sourceforge.net/
and Code Project: http://www.codeproject.com/KB/shell/classicshell.aspx
No, I doubt it will help. The classic start menu launches the shortcuts normally and doesn't try to bypass any security checks. Still, if you are in a need of a classic start menu for Win7, give it a try. I want to make it the best one out there.
My System SpecsSystem Spec
09 Dec 2009   #18
reghakr

Windows 7 Pro & Vista Home Premium
 
 

Quote:
I want to make it the best one out there
Are you the developer
My System SpecsSystem Spec
09 Dec 2009   #19
ElQuia

Windows 7 x64 SP1 - Ubuntu 10.10 x64 - Linux Mint 10 (dual boot + Virtual Box)
 
 

Guys, first I'm going to try with a repair install, NOT the upgrade that I already tried.
I run sfc /scannow, and it found some corrupt files that it cant fix, maybe because the OS is online.
I already downloaded classic shell to try, but first I want to fix my system, I dont believe that an add on will fix permisions or security problems
I´ll keep you posted.
My System SpecsSystem Spec
09 Dec 2009   #20
ElQuia

Windows 7 x64 SP1 - Ubuntu 10.10 x64 - Linux Mint 10 (dual boot + Virtual Box)
 
 

PEOPLE I SOLVED IT

See this post:
http://blogs.msdn.com/askie/archive/2009/06/19/how-to-bypass-the-security-warning-unknown-publisher-with-the-checkbox-always-ask-before-opening-this-file.aspx
----------------------------------------------------------------------
Friday, June 19, 2009 6:00 PM Brent Goodpaster How to bypass the security warning "Unknown Publisher" with the checkbox "Always Ask Before Opening this File"


Hi everyone!
Axel here from the IE Escalation team with a scenario related to Security Warning - Unknown Publisher pop-up when executing a file that came from a non trusted source.

Please note:The example below sets HIGH RISKfiles types to LOW RISKso that they can be executed without having to honor the warning dialog. We are creating this example because many corporate customers request this change to make their day-to-day operations easier to maintain. With that said, setting these options in attachment manager can put your system at risk, so please fully read the external documentation available on Attachment Manager and weigh the risks involved before making the decision to allow these files types to be executed without warning the user.
I am sharing this out because the immediate assumption is that by just adding the server name to the Local or Trusted Site zone will allow the file to be executed, which is not accurate. Once the file comes down from the untrusted source and with the Block file stream (see Fig. 1.1), until you remove the attribute you wont be able to run it without first getting the warning mentioned in this blog, see fig. 1.0.

Fig. 1.0 [Screenshot of the Warning with the checkbox “Always ask before opening this file” option]

Fig. 1.1 [Screenshot of the executable properties, showing the Security Unblock option]

Here is what it may look like once you have unchecked the option next to “Always ask before opening this file”.
Fig. 1.2 [Here is what you will still get, even after you have removed the checkbox]

Once you add the unc path to either the Local or Trusted Sites Zone, you will no longer get the warning.
In the above example, we can see that the application did not have a digital signature that verifies its publisher, so we will have to do more work to bypass the warning. You can either have the executable signed using signcode.exe or use the Build in Windows Attachment Manager Policy.
The reason why you get the warning in the first place is because in Windows XP/SP2 and Windows 2003/SP1 we have introduced a new feature called Attachment Manager. This feature was added to help protect your computer from unsafe file attachments. This include accessing files across your network (e.g \\servername\share), files that you might receive with an e-mail message and from unsafe files that you might save from the Internet.
If the Attachment Manager identifies an attachment that might be unsafe, the Attachment Manager prevents you from opening the file, or it warns you before you open the file.
Here are the steps to bypass the warning using Attachment Manager Group Policy. I am also including the registry key modified by the policy.


From Start Run type: gpedit.msc
From User Configuration> Administrative Template> Windows Components> Attachment Manager
Set the following:
Configuration Settings:
> Default risk level for file attachments: Set it to Enabled and Set the default risk level to[Low Risk]
> Inclusion list for low file types: Set it to Enabled and add the file extension [.exe;.vbs;.msi]
> Do not preserve zone information in file attachments: Set it to Enabled.
Close Gpedit.msc and run gpupdate /force
Screenshot of the policy:

Final Step:
> Add the UNC to Local Intranet or Trusted Sites
> Log off and log back in
> Test accessing the UNC share
Registry keys:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations]
"LowRiskFileTypes"=".exe;.vbs;.msi"
"DefaultFileTypeRisk"=dword:00001808
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments]
"SaveZoneInformation"=dword:00000001
Article below explains everything about Attachment Management.
Regards,
The IE Support Team

Filed under: Security, Solutions
My System SpecsSystem Spec
Reply

 Help Classic Menu - Shortcuts attributes - BIG mistake




Thread Tools




Similar help and support threads
Thread Forum
How Do I Auto Create Desktop Shortcuts with Attributes on Startup
Hi, We have a program called FREEPOS which runs from our main office PC. The program requires a mapped drive with S: as the drive letter to run from. The desktop shortcuts to start the program also use attributes to customize the process. example. WINSPOOL.EXE (in S: drive) has a desktop...
General Discussion
Shortcuts to EXE on Start menu Win7 64-bit, converts to menu
Two Win7 computers 32-bit 64-bit On Win7 32bit - to add a short cut to Notepad.EXE file Start > RClick > New Shortcut Browse to "C:Windows\Notepad.EXE" file etc ... shortcut runs the EXE file ... I run primary shortcuts with WinKey > number 0 to 9
General Discussion
Classic Start Menu, is it available....
Hi guys. I enjoyed and learned many things regarding Windows 7 in this forum. Thanks. ---------------- If I can kindly ask, does anyone know if there is any tweaks, etc. regarding the Classic Start Menu on Windows 7. Thanks.
Customization
Classic Start Menu
A guy on this web site has found a workaround to get something approximating the classic start menu. " "Classic" menu option does not exist in Window" Yes it does, but MS denies it! It's been my one pet hate not to have the classic menu, all fixed by this. It works exactly as his pictures...
Customization
Classic desktop and Classic start menu
Classic desktop and Classic start menu I was told it was not going to be available with windows 7. As I said it the other thread, that is what I have use since windows 95 and use it for xp currently. I don't know if Vista has it. I have set where, you can go start button-program-than...
Customization
Classic start menu
Hello , I try and csmenu Seven Classic Start.Seven Classic Start I love.Csmenu I find that is not as stable as it has bugs.Seven Classic Start applying for a license and unfortunately I was not finding.I would also like to translate the software in French. Thank you
Customization


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 03:38.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App