Microsoft Attachment Manager blocks files that have crossed the internet

Date:16 July 2008
Product/Release:LANSA
Abstract:Microsoft Attachment Manager blocks files that have crossed the internet which can cause problems for LANSA applications that use the blocked files
Submitted By:LANSA Technical Support

If you receive software in a zip file it may have crossed the internet at some stage in its journey to you (eg: e-mail, FTP, etc). This means the zip file may be marked by the Microsoft Attachment Manager as blocked.

You can check if a file is blocked by displaying its properties like this:

You can check if a file is blocked by displaying its properties

If you see the indicated message then the file is marked as blocked.

You should always unblock a zip file that you intend to install from before unzipping it - no matter how you got the zip file.

If you do not do this, every file you unzip from the zip file may also be marked as blocked.

If the unzipped files are marked as blocked they may cause you hard-to-find problems later.

You will probably have to unblock them individually.

If you want more details ….

Attachment Manager Windows XP Service Pack 2 (SP2)

Description

Attachment Manager is a new feature included in Windows XP SP2 and Windows Vista intended to stop users from opening malicious files downloaded from the Internet. It does that by attaching a small piece of additional information called zone information to the files, containing the URL from which the file was downloaded. This additional information tells Windows that those files are potentially dangerous.

How does it affect your files

If you download a file from the Internet, that file will be marked as unsafe until you unblock it. When a file is marked as unsafe, Windows might not allow you to open this file, however the exact behaviour depends on the type of the file. This is somehow confusing and might lead to hard-to-find and obscure problems later on. It is therefore necessary to always unblock any file that you trust to avoid any unnecessary problems.

Downloading a ZIP file from the Internet

If you downloaded a ZIP file from the Internet, it will be marked as unsafe. When you extract the files inside the ZIP file using Windows Explorer, it will mark all those files as unsafe as well. It is therefore very important to 'unblock' the ZIP file before you extract the contents.

How to unblock files downloaded from the Internet

You can check if a file is marked as unsafe from the properties screen (Windows Explorer, right-click, choose Properties).

You can check if a file is marked as unsafe from the properties screen

Click on the 'Unblock' button to tell Windows to remove the 'unsafe' marker.

FAT/FAT32 volumes are not affected.

Attachment Manager is unable to mark files that are stored on FAT/FAT32 volumes. Only NTFS volumes are affected.

How to 'unblock' multiple files easily

The simplest way to 'unblock' multiple files is by copying the files to a FAT/FAT32 volumes and back to your NTFS volume. An alternative would be to use a small tool that you can download from http://technet.microsoft.com/en-au/sysinternals/bb897440.aspx

Disabling the Attachment Manager

The Attachment Manager can be disabled.

The steps to do that are outlined below:

  1. Run the 'Group Policy Object Editor' (gpedit.msc) either from the Command Prompt or using the 'Run' command in the Windows Start Menu
  2. Expand the node 'User Configuration' >> 'Administrative Templates' >> 'Windows Components' >> 'Attachment Manager'.

    Expand the node 'User Configuration'  >> 'Administrative Templates'  >> 'Windows Components'  >> 'Attachment Manager'
     
  3. Right-click on the third option: Do not preserve zone information in file attachments. Choose 'Properties'.

    Right-click on the third option: Do not preserve zone information in file attachments. Choose 'Properties'

    Select 'Enabled' (Enabled would mean that 'Do not preserve zone information in file attachments' is enabled, which in effect will stop Windows from storing the zone information in file attachments). Click OK to close the dialog box.