Hi,
This info i have received from Microsoft.
(hmmmmmmmmmmmmmmmm)
I doesnt solve my problem, perhaps i solve yours ??
Erik
Cannot view folders in Web view after installing Windows 2000 SP3 and WGID:576
ID: 328994.KB.EN-US CREATED: 2002-09-10 MODIFIED: 2003-04-04
Public |
------------------------------------------------
!!! CAUTION !!!
This is NOT A FINISHED ARTICLE! - THE INFORMATION IN THIS ARTICLE MAY NOT BE CORRECT! It is an in-process (pre-published) content object, and as such, may not have been properly tested, written, tech reviewed, or edited. Please do not send this article to a customer or comment on this article in VisualKB. !!! CAUTION !!!
--------------------------------------
----------------------------------------------------------------------------
---
The information in this article applies to:
- the operating system: Microsoft Windows 2000 SP3 (Version: SP3)
----------------------------------------------------------------------------
---
SUMMARY
=======
After applying Windows 2000 SP3 into a clean installed system, you cannot view the folders in the customized Web View mode.
Windows 2000 SP3 includes an updated security policy that prevents unsigned webview templates from running.
To resolve this issue, please turn off the security policy. To do so, please add the RevertWebViewSecurity value into your system registry:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
"RevertWebViewSecurity"=dword:00000001
After adding the value, log off and logon the computer.
List of Security Fixes in Windows 2000 SP3:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
policies\Explorer]
"AllowLegacyWebView"=dword:00000001
"AllowUnhashedWebView"=dword:00000001
"RevertWebViewSecurity"=dword:00000001
With AllowLegacyWebView" = TRUE(1) we will render legacy custom webview templates for file system folders with templates that have a registered hash SHELL32\UTIL.CPP.
In fact, this value doesn't seem to exist.
// NT5 SP3 shell restrictions
{REST_NOSMCONFIGUREPROGRAMS, L"Explorer", L"NoSMConfigurePrograms"},
{REST_ALLOWUNHASHEDWEBVIEW, L"Explorer", L"AllowUnhashedWebView"},
{REST_REVERTWEBVIEWSECURITY, L"Explorer", L"RevertWebViewSecurity"},
This does not really matter as this is the default.
With "AllowUnhashedWebView" = TRUE(1) we will render legacy custom webview
templates for file system folders that do not have a registered hash but WILL provide a security warning dialog prompting user to confirm whether or not they want to run potentially unsafe script.
With "RevertWebViewSecurity" = TRUE(1) we will disregard any of the new security measures that were implemented in SP3 and revert to behavior that existed prior to SP3.
MORE INFORMATION
================
To duplicate the problem, you would have to go into %SYSTEMROOT%\Web and open the folder.htt file.
Make any change at all and save the changes.
Then refresh your explorer window. The left-hand pane disappears and it reverts to the old standard window view. Even the most mundane change causes the web-view to be non-functional (change the font color from black to blue).
Yes, you can customize each folder by going to View - Customize This Folder, but who wants to change them one-by-one when
you can change them all in one fell swoop?
Microsoft is deprecating .htt support due to potential security attacks through running HTML in the trusted My Computer Zone. (A signed .htt file says "I trust this .html content to run in the My Computer Zone".)