Tuesday, January 6, 2015

Open File - Security Warning when access content from file server

After moving APPDATA to a shared location to allow for users to roam between Citrix / Terminal Server systems, users were getting a warning notification when attempting to launch application shortcuts or access resources from this file server. Open File - Security Warning. This file is in a location outside your local network. Files from locations you don't recognize can harm your PC. Only open this file if you trust the location.

This is a per user setting in the registry and the easiest method I've found for setting this value is via a Group Policy registry setting.

I've launched Group Policy Management from the domain controller and selected the policy that applies to the users when logging into Citrix.

From the tree on the left expand User Configuration | Preferences | Windows Settings









Right click on Registry and select New | Registry Item

Action: Update
Hive: HKEY_CURRENT_USER
Key Path: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\[server name and/or FQDN]
Value Name: file
Value type: REG_DWORD
Value data: 1

Now I've added two entries, one for the server name, and one for the server fqdn.  That way if a user accesses a resource as servername or servername.domain.xxx they are both covered by this policy.





After updating the GPO, and logging off then back on the system the policy is in effect and no more warnings.

The fix is to add the file server to the Internet Settings sites list in a less restrictive zone.

Here are the value data definitions if you prefer to not add the server as a local Intranet Zone site.

Value definitions:
1 = Local Intranet Zone
2 = Trusted sites zone
3 = Internet zone
4 = Restricted zone

No comments:

Post a Comment