The Outlook Security Patch
Revised Security Settings
The default security settings for Outlook have been changed, and increase the
default Internet security zone setting within Outlook from Internet to re
stricted sites . In addition, active scripting within restricted sites is disabled by
default. See below for more on this.
Side Effects
The Outlook security update will affect certain functionality within Outlook, and
may also have an impact on the interaction of some third party software programs
with Office.
Accessing Attachments
Once you install the update, users will not be able to access attachments with file
types that could run executable code or change settings on a computer. These file
types are known as Level 1 security files and they are listed in Figure 1. If a user
receives a message that contains an attachment that cannot be accessed, the inbox
will display the paperclip in the attachment column to let the user know that the
message has an attachment. When the message is opened, the attachment will not
be available.
On the File menu, the Save Attachments command and the View Attachments
command on the shortcut menu will not be available for the message. In the case
of a message with multiple attachments, the unsafe attachments will not be
accessible but other attachments will be retained.
Save To Disk
If a user receives a message containing a Level 2 file as an attachment (see Figure
2 for details), he or she will be warned that the file must be saved to disk before
it can be opened. It can't be executed directly from within Outlook.
Sending Attachments
When you attach a file to email, the update checks the file type when you send
the message. If the file type is on the list of restricted files, you will be warned that
other Outlook users may not be able to open the attachment. If you click Yes, the
message is sent with the attachment. If other users have the update installed, the
attachment will be inaccessible. If you click No, the message will be returned to
you for editing, which will involve removal of the attachment.
Defaults
Default security zone settings are set to Restricted Sites (rather than Internet) by
default, and active scripting within restricted sites is disabled by default when
the patch is installed. The Restricted Sites security zone disables most automatic
scripting and prevents ActiveX controls from opening without the user's permis
sion. These security features help protect users from many viruses that are spread
by means of scripting.
Conclusion
So, should you install the Outlook security patch? At face value, this seems like
a daft question. Why would any company which uses Outlook not want to install
such an important security update as this one? Unfortunately, it's not that easy.
File types on the Level 2
The patch has side effects which may have a big impact on the way that your users
security list must be saved
work, as it will permanently deprive them of the ability to receive executable
to disk before they can be
attachments. Our advice is that, wherever possible, you should indeed install the
opened the files cannot be
patch, but think carefully before doing so.
opened
directly
from
within Outlook. There are
no file types on the Level 2
security list by default, but
file types can be added to
the list by system adminis
PCNA
trators.
Figure 2 Level 2 security files.
Copyright ITP, 2000
Issue 123:October 2000
PC Network Advisor
File: P1835.2
page 8
Problem Solving:Internet
www.itp journals.com
< Next page >
New! The best sites for quality inkjet printer cartridges and the best sites for cheap inkjet cartridges