Skip to main content

"Open File - Security Warning" - How trust UNC Path using ProfileUnity

Lukasz Mikosz
  • Created:
  • Updated:
Problem: 

When my users are trying to install this program from redirected desktop it pops up this error message:

 

"This file is from an untrusted location. Are you sure you want to run it?"

or

Whenever opening ANY application from redirected location you receive the following "Open File - Security Warning".

This is error appears when trying to launch executable file from a network location. The network location is not a trusted location and its warning user that it could be potential security risk. 

 
Symptoms:
Example:
popup.jpg

Possible Resolution(s):

Note: If this was regular physical desktop to fix this it would require following steps:

Open Internet Options (IE)>Select "Local Intranet">Sites>Advanced>Enter: "\\Servername\">Add

 

ProfileUnity can set these settings remotely for all the users, to launch any files from any shares on local domain without the warning, and trust UNC Path.

Note: Both settings are part of default ProfileUnity 5.5 configuration.

Here is how to add two registry rules manualy:

In ProfileUnity console, Edit configuration and select "Registry" and "Add Registry Rule" 

1st Registry Rule:

  • Action: Add Value
  • Hive: HKEY_CURRENT_USER
  • Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\@LDOMAIN
  • Type: REG_DWORD
  • Value: *
  • Data: 1
  • Description: Trust UNC Path

Example:

1.jpg

Note: "@LDOMAIN" returns the name of the domain to which the user has logged in.

2nd Registry Rule:

  • Action: Add Value
  • Hive: HKEY_CURRENT_USER
  • Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\%userdnsdomain%
  • Type: REG_DWORD
  • Value: *
  • Data: 1
  • Description: Trust UNC Path

Example:

2.jpg

Note: "%userdnsdomain%" environment variable returns the fully qualified DNS domain that the currently logged on user's account belongs to.

Save and "Update" your config and download to ...netlogon\ProfileUnity folder

 Note: If the message still appears when launching a shortcut, please follow steps here:

  1. Add shortcut location to IE settings:
    • Open Internet Options (IE)>Select "Local Intranet">Sites>Advanced>Enter: "\\shortcut location\
  2. Open registry editor and find the same setting there:
  3. HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
  4. Replicate same registry key(s) using "Registry" module in ProfileUnity configuration. 

Related KB: Launching applications or shortcuts from a redirected folder requires security verification

Related KB: How to avoid "Open File - Security Warning" when launching programs from redirected folders to TCP/IP locaton

 

 

Product: ProfileUnity

Product Version: 5.5

 

Related articles