I've been using this article (http://support.microsoft.com/kb/829982) to create reg files to patch Outlook XP, 2003 and now 2007 to make them display/accept certain attachments. But this is getting tedious as users number increases and Outlook clients are even far more than users, eg inside Terminal Server, every user has an instant of Outlook and I have to apply reg files to everyone of them!! OK, if you don't understand the issue, put it this way: I had to apply 100 times this reg file patch when I deployed Outlook 2003, and 150 times for Outlook 2007. And there're situations where I can't apply and users always had to call me what to do. Are these numbers big enough for me to find some alternative solutions? Personally, I think YES. Back to that article, there's this "Method 4: Ask the Exchange server administrator to change the security settings". Someone understands what to do exactly?? Because that paragraph didn't give much hint as to what to do to "adjust security settings".....

This article - http://support.microsoft.com/kb/837388- gives you the location of the Public Folder where the Outlook Security Settings are housed. Simply edit thefile extensionthat you wish to allow instead of block, as given in the article.This article - http://support.microsoft.com/kb/290499/- may help as well.HTH!

I've actually found those articles as well, but none of them are clear enough to give me a procedure. I've no idea what "Outlook Security Administrator Package" is and where to get it, and no idea if it's possible to do things otherwise. As to the second article you've given, the link http://www.microsoft.com/office/ork is broken and not clear how to do otherwise.

How to: modify the block list globally for outlook clients? We can use outlook template to configure attachment settings by using Group Policy, Allow access to e-mail attachments option is a good option to achieve it. For more details, please see Customize attachment settings in Outlook 2007 (Similar option also exists in the outlook 2003 template) Notes: 2007 Office system Administrative Template files for Outlook 2007, and Office 2003 Editions Resource Kit for Outlook 2003 More resources: Customizing Security Settings by Using the Outlook Security Template

Hi, Horinius, hows the issue? Does the GPO method work for you?

I haven't started to read again all that in details because I understand nothing of all those gibberish written in those MS articles... I expected something simple, or at least clear step by step procedure and ideally with some figures/pictures. But instead that's just a lot of bla bla bla..... If you ask for public opinion about the quality of all those MS articles, I'm sure people would tell you that those articles are incomprehensible, illegible, indecipherable! Wondering if they're written by grade-3 children! And I don't have time and effort to read them.

I see. I tested the method in the local lab. The following is the step by step procedure that I summarized: 1. Download outlook template (For outlook 2003; For outlook 2007) 2. Extract both installation files on the DC 3. Launch ADUC, right-click the OU that users stay and select Properties 4. In the Group Policy tab>click New button to create a new group policy object>select the new group object>click Edit button 5. In the Group Policy Object Editor window, expand User Configuration and right-click Administrative Configuration, select Add/Remove Templates 6. In the jumped window, click Add button, in the SystemDriver\Windows\Inf folder, choose OUTLK11.ADM file to add. In the path of outlook 2007 template installation that you set in the step 1, expand the folder to ADM\en-us, choose OUTLK12.ADM to add 7. After add the outlook template, we can see Microsoft Office Outlook 2003 and Microsoft Office Outlook 2007 node under Administrative Configuration 8. Now, please expand to Microsoft Office Outlook 2003>Tool|Options>Security, double-click Allow access to e-mail attachments 9. In the jumped window, select Enabled and enter the extensions you want to allow 10. Also, expand to Microsoft Office Outlook 2007>Security>Security Form Settings, double-click Outlook Security Mode 11. In the jumped window, select Enabled and Use Outlook Security Group Policy in the drop-down list 12. Continue to expand to Microsoft Office Outlook 2007>Security>Security Form Settings>Attachment Security, double-click Remove file extensions blocked as Level 1 13. In the jumped window, select Enabled and enter the extensions you want to allow 14. Close the Group Policy Object Editor window, click OK to close the Properties window of OU 15. The group policy will take effect in a while (30 mins ~ 90 mins) Notes: If you dont want to wait, please run gpupdate in a command window on the DC and client PC Notes: If you are using windows server 2008 as DC, we need to create new group policy object by referring this article as step 4, but other steps will be same as above

OK, thank for your help. I'm doing a migration to Exchange 2007 SP1 right now, so I have to postpone this test. I'll see it later. Thanks.

Hi, I cant get this to work. Im using Exchange server2007 SP1 Rollup 9 with Outlook 2007 SP2. I want the users to be able to send mdb-files to each other and I have looked, an mdb-file is a Level 1 file. I still get the same result, file attachment is blocked. Any ideas? Kind Regards, Cathra

I see. I tested the method in the local lab. The following is the step by step procedure that I summarized: 1. Download outlook template (For outlook 2003 ; For outlook 2007 ) 2. Extract both installation files on the DC 3. Launch ADUC, right-click the OU that users stay and select “Properties” 4. In the “Group Policy” tab>click “New” button to create a new group policy object>select the new group object>click “Edit” button ...... I've got some spare time, finally, to try this. However, in "properties" dialog, there's no "Group Policy" tab. On the other hand, I'm now having some domain computers using Office 2010. So I also need to find the same "template" for 2010? I also try to understand what this procedure is trying to do. It seems like this procedure has a lot of problems: 1. Users are put in different OU. So it's very annoying to go through the same thing to several OU. Is it possible to do it in domain level? 2. A user can use Outlook 2003, 2007 or 2010. Is there some generic procedure to apply this without having to consider the version, be it 2003, 2007 or 2010? 3. This procedure seems like to apply changes in client computer level. But as I understand it from the article I mentioned in the first post, the setting is to be applied in server level (not client level). So, is this procedure really the same one suggested by that article?