Disable Windows 7’s “Open File - Security Warning” dialog for exe on local drive?

I am trying to run Eclipse java-galileo-SR2-win32 when I get open-file-security-warning. The files are just extracted from a zip file and put into a directory "C:\Users\UserName\AppData\LocalLow\eclipse-java-galileo-SR2-win32\eclipse".

The Internet Explorer settings for adding network drives to the intranet zone do not work on local drives. Also there is no option to 'unblock' the file in the file properties.

What other option is there to turn off this annoying prompt? Or even better be able to select which files are considered safe to run.

Menuta

Posted 2010-04-24T08:30:05.237

Reputation: 263

Answers

The solution is to put the directory where it belongs such as C:\Program Files (x86)\eclipse-java-galileo-SR2-win32\eclipse this the removes the open file security warning dialog. c:\Users\UserName\AppData\LocalLow directory must have similar security as the intranet zone.

Menuta

Posted 2010-04-24T08:30:05.237

Reputation: 263

If anyone knows why the LocalLow folder is restricted like this can you please tell us why? – Menuta – 2010-04-29T02:25:50.677

1That is its sole purpose. Trusted data goes in c:\Users\UserName\AppData\Local, untrusted data in ..\LocalLow.

My understanding is that, if a pre-Vista program attempts to write to the users application directory (ie what used to be c:\Documents and Settings\UserName\Application Data) then this is magically remapped to either Local, LocalLow or the Roaming subfolder inside c:\Users\UserName\AppData depending on which mode the program is running in. So if program is running in low security mode , then it can only write to LocalLow which is also low security. – sgmoore – 2010-05-01T19:45:09.997

In the start menu enter gpedit.msc. Then go to:

User Configuration -> Administrative Templates -> Windows Components -> Attachment Manager

and Add *.exe to the "Inclusion list for moderate risk file types" setting.

CGA

Posted 2010-04-24T08:30:05.237

Reputation: 3 767

1I want to be able to select which exe are allowed to run, rather than allow all of them. – Menuta – 2010-04-24T09:37:15.817

@Menuta: Just a long shot, but you try adding "filename.exe" instead? It appears to work for me – jay – 2010-04-29T07:05:23.630

Thanks for the suggestion, hadn't thought of that, obvious really. I have already moved the files to program files anyway which has bypassed the error. – Menuta – 2010-04-30T07:38:59.577

Adding eclipse.exe works great! +1 – James Mertz – 2013-01-21T16:42:10.050

Is it possible that one of the other files (maybe a dll) is blocked?

Streams from Sysinternals is a handy command line utility which can be used to display NTFS streams on all files in a directory and sub-directories. It can also be used to remove all the streams (assuming that they are all just Zone.Identifiers)

sgmoore

Posted 2010-04-24T08:30:05.237

Reputation: 5 961

I tried that no luck. – Menuta – 2010-04-27T06:23:17.510

This is THE solution. streams -s -d "C:\Program Files\Eclipse" – gnom1gnom – 2016-03-03T09:42:02.323