Something Wrong in AD - File Associations keep disappearing

[GVN]

Something is severly wrong in Active Directory. I have never seen anything happen like this... File associations keep disappearing on random desktop PCs. This is even occuring on PCs that have been reloaded, so I know it has to be something progagating down for AD.

What happens: files with either a .TIF, .JPG, .BMP, or .PDF all the sudden will not open when they are doubleclicked. When you look in the "Registered file types" within My Computer >> Tools >> Folder Options they are listed as being associated with an application to open them, but it doesn't work. Only after you delete the association and then re-create it does it work correctly again? Can AD manage these settings?

Mark

 

[chipk]

Are your machines patched and running Antivirus software? This sounds like a recent virus, but I can't recall the name...

 

[GVN]

Yes, TrendMicro AV...

 

[chipk]

And what about Windows Updates?

 

[GVN]

They are pretty much up to date it appears.

 

[chipk]

There are a couple ways your file assocations can be changed. That it's happening randomly is weird, and I would ask, are you sure it's random?

There are a couple ways to change file associations. Command line tools called "ftype" and "assoc". I would look for refernces to these in login/startup scripts in AD etc.

Also look for references to HKCU\SOFTWARE\Classes\ and HKLM\SOFTWARE\Classes in your logon scripts.

 

[GVN]

It's neither of these, sorry. That's why I think its something to do with AD...

 

[chipk]

Well, AD would include login/startup scripts set in GPO, wouldn't it? I don't think it's a built-in policy, but if you think it is, you'll need to use the Group Policy Management Tool to find the Resultant Set of Policy for any software settings. A good place to start would be at Computer Config\Windows Settings\Security Settings\Software REstriction Policies.

 

[GVN]

No Software Restriction Policies are Defined