Open File Security Warning - Enable or Disable

Pyprohly said:

To block a file manually, from the Command Prompt,

Code:

(echo [ZoneTransfer]& echo ZoneId=3) > "C:\path\to\file.exe:Zone.Identifier"

Thank you. :)

Pyprohly said:

If you can gather a list of files you wish to block, you can easily batch process them.


Brink, that typo is still there.

RainyDays said:

(P.S. Theres a small typo in the original tutorial, in the "Note" of Option 2 -> 2. It says
"the same file extensions in step 4D of OPTION TWO below"
but it should say OPTION THREE)

Thank you. Now corrected. :)

Had typed a nice thorough post and realized that my login was timed out when hitting the submit button and lost the whole thing! So, a little bit shorter version follows.

More info can be read from this SevenForums thread by BigAlUK.

Integrity Levels, (or also known as Mandatory Integrity Labels or IL s) are causing this security warning message we are seeing. Most recommendations are just hiding/suppressing this warning (warning isn't really helping us anyway). Let's remove what is causing the warning instead of hiding the warning.

IE running in Protected Mode is probably running with Integrity Level of LOW. Untagged files and folders are equal to having IL set of MEDIUM. Processes CAN NOT access a file or folder of higher IE level. IE running in Protected Mode is setting a folder that it is saving into to IL level of LOW so it can save to it. Processes accessing files or folders of LOWER IL than itself prompt with a security warning.

Set IL of a folder that got set to LOW (for example, Desktop) to MEDIUM, by running the following ICALCS (built into Windows) command from an elevated command prompt.

Code:

icacls Desktop /L /SetIntegrityLevel med

To set the folder back to it's original state and remove the IL, run the following command (requires free 3rd-party util from Mark Manasi) from an elevated command prompt.

Code:

chml Desktop -rl

Verify that an IL set to LOW is indeed your problem by running the following from the command prompt. If you see a "Mandatory Integrity Label" of Low, one of the two above will fix your problem and no security prompt. I use the Desktop folder as an example as that is where I have seen the issue occur in my school district, but it could happen to other folders as well (running a program with LOW IL to save a file).

Code:

icacls Desktop

Posting to this thread as don't know if I've found any other solution (except BigAlUK's as mentioned above) about the issue being IL related and using ICALCS. My personal opinion is that removing the IL (using chml) is preferred and results in a much "cleaner" way of handling the issue than working around it or just masking what is going on. Am hopefully helping out a few others to understand what is actually causing this security warning and giving another couple ways to deal with it.

Hello Brian, and welcome to Seven Forums. :)

Please go ahead and post a screenshot of the warning message to see if it may be for something else.

Screenshots and Files - Upload and Post in Seven Forums