Group policy software restriction Outlook issue

[atodorski]

Please forgive me if this is terribly ignorant or obvious, but I am new to Windows Server. I have been tasked with locking down a Server 2003 domain of XP clients such that the users can only run specified applications. I made a group policy for that group of users and used the "Run only allowed Windows applicaitons" template to make my list of allowed apps. Everything worked as expected except for when a user clicks a link in an email in Outlook 2003 (Exchange 2003 backend) they get an "...operaiton cancelled...access restrictions" message as if they had tried to run an off-list app, even though both IE and Firefox are on the list of allowed apps. What am I missing?

Any help would be much appreciated.

 

[aftertaf]

it could be another restriction in place, and not the allowed apps restriction.

difficult to say what, i've never encountered that problem.

get a copy of policysettings.xls (search google for that file) and look through it, you might find some help in there!
its a list of all GPO settings possible.

Aftertaf
________
I reserve the right to be wrong, be confused, be suffering because it is monday, or because it is nearly the weekend.

 

[atodorski]

Awesome, I'll give that file a look. I'm a Linux/Unix programmer and administrator by trade and my first inclination is to debug the Windows security restriction processes. Is there a way to say get the event log to show whenever a security policy is enforced? I poked around in the Auditing policies but they didn't do what I expected.

Thanks again, Adam

 

[atodorski]

I looked through all of the GPO settings and could not find what I was looking for. It must have something to do with the limit on the programs that a user may run. In fact, I seem to remember dealing with this very problem a while ago and the resolution was adding something like rundll32.exe to the allowed programs list (I tried rundll32.exe though; no dice). Any ideas?

Adam