I'm running Exchange 2007 server with SP1, uaser complains that he can't get the .mdb (accesss db) file as by edfualt blocked by Exchange 2007. I wanna know what is the security risk with this type of file.

mdb: Access Application (Microsoft), MDB Access Database (Microsoft) ---------<Attachment file types blocked by Outlook> We shall not allow such attachment through the exchange, the attachment with such extension may put server and workstation at risk for viruses or other potential threats If such file really needs to be accessed, the user shall ask files sender to change the extension (A.mdb --> A.__) , so exchange server wont expose any security leak

As far as i know file extension blocking is done at the outlook level. You can allow certain file extensions, and grant them an access level using group policy. The access level tells outlook what it can do with the file. For example save only rather than open. See here for gpo info Managing Outlook 2007 through Group Policies (Part 2) See here for a one time registry setting You may receive an "Outlook blocked access to the following potentially unsafe attachments" message in Outlook

Hi,If you read Outlook Resource Kit documentation and implement the whole solution described there you will be able to administer the whole Outlook security infrastructure centrally on user level through an Outlook form pulished to a special Public Folder.The documentation and necessary files can be downloaded here (Outlook 2003 Administrator Pack):http://office.microsoft.com/en-us/ork2003/HA011401761033.aspxRegards,Zoltnhttp://www.clamagent.org - Free Antivirus for Exchange http://www.it-pro.hu http://emaildetektiv.hu

Yes, you can allow those MDB attachments with LKeneston suggested, and the action takes the certain security risk along