Re: HTML Help files on network shares now unavailable

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 07/21/05 

Date: Thu, 21 Jul 2005 15:30:26 +0200

Pete G wrote:

> After security update MS05-026 was installed on our user's workstations, no
> one can access HTML help files (.chm) files from applications installed on or
> residing on a network share.
>
> I have seen the KB articles explaining why, and the "fixes", but they are
> inadequate. One specifies to right-click each .chm file, go to Properties
> and choose "unblock". a) this option of "Unblock" doesn't exist, and b)
> there are thousands of these .chm files.
>
> Another KB article gives registry changes that don't make sense to deploy
> enterprise-wide, and they defeat the purpose of the security patch in the
> first place.
>
> I have searched far and wide and have not found a fix for my environment.
> Any ideas, places to research further, patches upcoming, etc?
>
> Thanks
Hi,

I'm afraid deploying some registry settings is your only option.

Deploying the setting in the registry file listed below will solve
the problem as long as your network drive or UNC path is defined as
"Local intranet zone" (it should be).

To see what zone you have for the path, in Explorer, select
"Status Bar" under the View menu and then go to the folder where the
help files are located. If it says "Internet" in the Status bar, you
will need to add your domain or server to the "Local intranet zone".

--------------------8<----------------------
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\HTMLHelp\1.x\ItssRestrictions]
"MaxAllowedZone"=dword:00000002

--------------------8<----------------------

The setting above will open up for Local Machine zone, Local intranet
zone, and Trusted sites zone, but *not* the Internet zone.

More about this registry setting here:

http://support.microsoft.com/kb/896358

and here:
http://support.microsoft.com/kb/896054 

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Relevant Pages

  • Re: Links in DV_FOXHELP.CHM no longer work
    ... MaxAllowedZone Local Machine zone Local intranet zone Trusted sites zone ... Re-copied the chm from my install CD ... Tried other CHM files to see if they behave this way - they behave ...
    (microsoft.public.fox.programmer.exchange)
  • Re: WSS 3.0 prompting for authentication on Vista clients
    ... Sadly, my previously posted solution (configure your Sharepoint server in the "Local intranet" Zone, AND disable protected mode) ceased working after a day in production, so I guess my pride at being placed in the WSS FAQ was premature. ... Even if the previously posted solution did work, I think that a permanent Information Bar pop-up in IE which advises users on managed computers that their IE settings are making their computer vulnerable is a bad thing. ... Mike Walsh wrote: ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Publisher could not be verified message, IE UserControl
    ... You may first want to make the zone show up in the Internet Options dialog. ... Then go to Internet Options dialog, Security Tab, select My Computer Zone and change the security level for the zone. ... registry settings have the intended effect of NOT presenting the "publisher ...
    (microsoft.public.windowsxp.embedded)
  • Re: Authentication Question
    ... URLs without dots in them are put in the "local intranet" zone. ... "Mike Walsh" wrote in message ... > are specified in such a way that you won't get an authentication request. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: URL asks for for authentication, why?
    ... Internet Options -> Security tab. ... Internet zone by default. ... Automatic logon only in Intranet zone, ... Local Intranet zone, click Automatic logon only in Intranet zone. ...
    (microsoft.public.sharepoint.windowsservices)