Comments on: Feature….or Flaw? http://blog.scottlowe.org/2007/09/20/featureor-flaw/ The weblog of an IT pro specializing in virtualization, storage, and servers Mon, 01 Dec 2008 21:38:42 +0000 http://wordpress.org/?v=2.6 By: MValdez http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-35199 MValdez Fri, 25 Jan 2008 14:52:18 +0000 http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-35199 Thanks for your little article. Finally I know why our Samba shares are full of files named like "document.docZone.Identifier". I thought this was Samba trying to save the alternate stream, but now I think it is IE saving it (succesfuly) in a non-NTFS filesystem. By the way, there is an option in the Properties dialog of the file with a buttone named "Unblock". With that you can delete the alternate stream with the zone information. However, the Registry entry HideZoneInfoOnProperties (as shown in the article referenced by Antonio) define if that button is shown or not (default is to always show it). Regards, MV Thanks for your little article. Finally I know why our Samba shares are full of files named like “document.docZone.Identifier”. I thought this was Samba trying to save the alternate stream, but now I think it is IE saving it (succesfuly) in a non-NTFS filesystem.

By the way, there is an option in the Properties dialog of the file with a buttone named “Unblock”. With that you can delete the alternate stream with the zone information. However, the Registry entry HideZoneInfoOnProperties (as shown in the article referenced by Antonio) define if that button is shown or not (default is to always show it).

Regards,

MV

]]> By: slowe http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33672 slowe Tue, 09 Oct 2007 19:30:13 +0000 http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33672 Antonio, Looks like some good information. As soon as I have time, I'll review it more thoroughly. Thanks! Antonio,

Looks like some good information. As soon as I have time, I’ll review it more thoroughly. Thanks!

]]> By: Antonio http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33668 Antonio Tue, 09 Oct 2007 15:31:55 +0000 http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33668 Have you checked this? http://support.microsoft.com/kb/883260 Have you checked this?

http://support.microsoft.com/kb/883260

]]> By: slowe http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33458 slowe Sat, 22 Sep 2007 03:25:50 +0000 http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33458 Gavin, Thanks for the feedback! Great work of your own, by the way, over at Xtravirt. Gavin,

Thanks for the feedback! Great work of your own, by the way, over at Xtravirt.

]]> By: gjolliffe http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33452 gjolliffe Fri, 21 Sep 2007 14:42:21 +0000 http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33452 Oops - disregard/delete my last comment; I didn't read your post properly; you've already put the link and workaround in. Teach me to blindly write stuff late on a Friday afternoon... :) Nicely written article by the way Gavin Oops - disregard/delete my last comment; I didn’t read your post properly; you’ve already put the link and workaround in. Teach me to blindly write stuff late on a Friday afternoon… :)

Nicely written article by the way

Gavin

]]> By: gjolliffe http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33432 gjolliffe Fri, 21 Sep 2007 14:00:21 +0000 http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33432 We've also hit that feature before - found that this was a useful solution: http://support.microsoft.com/kb/889815 We’ve also hit that feature before - found that this was a useful solution: http://support.microsoft.com/kb/889815

]]> By: slowe http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33428 slowe Fri, 21 Sep 2007 11:44:36 +0000 http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33428 Richpo, Modifying the Trusted Sites list in IE *does not* fix the problem. See, the alternate data stream embeds the originating security zone, not the originating site. So even if you add the original site to the Trusted Sites list, that will only work IF you do that BEFORE downloading the files. It won't work to fix the problem AFTER the files have been downloaded. In this situation, the vendor was telling us the very same thing, and it was NOT fixing it. The only fix was to remove (or potentially edit) the alternate data stream. Richpo,

Modifying the Trusted Sites list in IE *does not* fix the problem. See, the alternate data stream embeds the originating security zone, not the originating site. So even if you add the original site to the Trusted Sites list, that will only work IF you do that BEFORE downloading the files. It won’t work to fix the problem AFTER the files have been downloaded. In this situation, the vendor was telling us the very same thing, and it was NOT fixing it. The only fix was to remove (or potentially edit) the alternate data stream.

]]> By: richpo http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33424 richpo Thu, 20 Sep 2007 23:58:00 +0000 http://blog.scottlowe.org/2007/09/20/featureor-flaw/#comment-33424 I had a similar problem with pushing packages out to Windows 2003 SP1 servers. Due to the change in SP1 and IE. I couldn't run packages from the file share anymore. The work around was to add the server to IE's Intranet zone or just to download the package locally before executing it. I think you can change the group policy to put your trusted hosts in IE. Thanks for the tip about the streams I had forgot about them I had a similar problem with pushing packages out to Windows 2003 SP1 servers. Due to the change in SP1 and IE. I couldn’t run packages from the file share anymore.
The work around was to add the server to IE’s Intranet zone or just to download the package locally before executing it. I think you can change the group policy to put your trusted hosts in IE. Thanks for the tip about the streams I had forgot about them

]]>