need to block .zip attachments in OUTLOOK 2007

[pjrey]

man, seems pretty straight forward, but i have had one heck of a time. i need to block .zip extensions from outlook 2007. we have only one instance of outlook running, we do not have public folders/exchange servers...

i have messed around plenty with the LevelRemove1 crap, LelevlAdd..etc.. (here is what ive tried: http://support.microsoft.com/kb/926512)

any help would be MUCH appreciated

(i am currently getting around this by using filter rules with my email server, and having it routed to BOXTRAPPER, user sending zip must reply with subject intact to have original zip delivered...

works... but i should be able to do it all via outlook..

i never want zips coming in (zip_safe would be ok)

thanks again!

pj

[+BudMan MVC]

You would be better off blocking it at your server vs the client. Since you don't have exchange you would have to do it on the current users registry entry

Key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\your office # 10,11,12, etc\Outlook\Security

String value: Level1Add <---- This might be your problem, I have seen some articles where it states this is a DWord which is not right

Values: List of file name extensions that are separated by a semicolon

example - this article lists it as a DWord, there is no way to put in a list of attachment types if its a DWord ;)

http://support.microsoft.com/kb/926512

If the Security key level1Add value do not exist - just create them, and then put in the attachment ext you want to block

I don't have a copy of 2007 to test with on this machine.. But I can tell you it works for this outlook 2003 just fine. And should work the same for 2007 as well. I did not have the reg entries - had to create them.

So sent myself a zip file from gmail before I put in the setting.

HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Outlook\Security

Before I put in the entry

After I put in the reg change and then restarted outlook

But again -- this would be a pain in the ass to do on multiple machines - and as you can see its still there, a user could still get access to it -- its just blocked.. It would be better to strip/block it at your server.

[pjrey]

thank you budman for responding

i have done all that, over and over, and over again...

no luck...

i first was going off of this page:

http://www.slipstick.com/outlook/esecup/blockzips.htm

then i found:

http://support.microsoft.com/kb/926512

i have tried it all! it will not block zip!

Key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Outlook\Security

DWORD value: Level1Add

Values: List of file name extensions that are separated by a semicolon

Note The file name extensions on this list are blocked by Outlook 2007.

so strange.. i wonder what is going on.

(it is only on one system i need to block, so the reg way is just fine)

pj

[Joel]

You're typing the . before the zip

Just put zip

[pjrey]

i just saw that (and made an edit to my post, but it didnt update it)

i also saw:

[HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Security]

"FileExtensionsAddLevel1"="zip;"

saying that Level1Add was just for versions 11- and previous, for 12 it is

FileExtensionsAddLevel1

anyone with 12 out there?

pj

here is what im getting (i have also blocked DOC same as ZIP)

Edited January 20, 2010 by pjrey

[+BudMan MVC]

Well if you were dicking with other settings??

Screen shot looks weird to be honest -- your using the local client and not some web one? But I have 2k7 on home machine, will check when I have a chance.. But the path is the same from the article I linked too as the previous versions.

So it should be working -- possible your outlook is not actually closing when you make the changes.. It hangs here all the time, process is still running - for it to read the reg entries you would have to make sure it actually closed.. Best would be to reboot the machine to be sure, etc.

edit:

I am fairly sure they are still valid reg entries -- minus the dword vs string entry, etc. I will test when I get a chance

From here

http://support.microsoft.com/kb/926512

Registry settings that were used in earlier versions of Outlook

Certain registry settings that were used in earlier versions of Outlook also apply to Outlook 2007. You can use these registry settings together with public folder security forms, or you can use them as independent settings. These registry settings are not considered part of the Outlook 2007 Group Policy object approach to attachment and add-in security.

The Level1Add registry entry

This policy lists the file name extensions that are promoted to Level 1 security.

Key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Outlook\Security

DWORD value: Level1Add

Values: List of file name extensions that are separated by a semicolon

Note The file name extensions on this list are blocked by Outlook 2007.

Edited January 20, 2010 by BudMan

[ShadowPHP]

i just saw that (and made an edit to my post, but it didnt update it)

i also saw:

[HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Security]

"FileExtensionsAddLevel1"="zip;"

did you copy that into your registry? Don't think you want the ; after zip if you did.

[+BudMan MVC]

Ok I just verified this on Outlook 2007 running on win 7.. Funny thing is there was no office key under

HKEY_CURRENT_USER\Software\Policies\Microsoft

I had to add the following keys

\Office\12.0\Outlook\Security

This is the only key I added, this was the only setting I adjusted it.. This was a clean install of outlook 2007.. I connected it to my gmail account using imap. Sent myself a test message again this morning before the setting.

And as you can see it shows up fine

I then put in the 1 regkey entry, after creating the \Office\12.0\Outlook\Security key and using a strings entry put in zip.

As you can see it blocked it just fine

So Im not sure what other settings you have dicked with -- but as you can see it works as it should, that reg key listed in the articles works as stated -- orther than the dword vs string messup ;)

edit: You know upon better looking at your screenshot of where you put the reg key.. That does not look right to me.. Why do you have policies for notepad, multimedia, etc.

You sure your HERE

HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Outlook\Security

If you put the entry for example in this path

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office

Its not going to work.

If your in local system software or something -- then that key wont work.

Edited January 21, 2010 by BudMan

[pjrey]

man oh man, i got it going, thank you budman..

i somehow got spun around... and was editing office (not POLICIES!)

i was under soft-micro-office-outlook

grrrr.. .i had started working under policies, then i must have been searching around.. and closed, and when i re-opened regedit, it started where i left off...

i got it going. thank you to your help!

thanks everyone

pj