How do I get rid of the seurity warning when I run a .exe ?

[BlueScreenJunky]

Hi, I was just wondering if it was possible to get rid of this message using nlite :

I'm pretty sure it must depend on some kind of service or something that can be removed by nlite, but I just can't find which one... any help ?

thanx !

[GrofLuigi]

I'm not sure if nLite does (all) of this. But this is what you need:

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download]
"CheckExeSignatures"="no"
"RunInvalidSignatures"=dword:1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments]
"SaveZoneInformation"=dword:1

or

In Internet Explorer, click Tools/Internet Options > Security.

Click the Internet icon, then the Custom Level button.

Under Downloads, check the radio button marked Enable under the heading "Automatic prompting for file downloads."

Click OK here and in the next dialog.

GL

[TranceEnergy]

Thank you so much for asking this question BlueScreenJunky and GrofLuigi for simple solution.

One of the many things i keep forgetting to my-to-do-list of tweaks to have in nlite xp cd.

But better to set it for DefaultUser so it's for everyone on system?, i plan to silent import the registry tweak before 1st login.

[GrofLuigi]

But better to set it for DefaultUser so it's for everyone on system?, i plan to silent import the registry tweak before 1st login.

I think you can, but there was some information at the time that DefaultUser is not just a simple template for users, but it is used for i.e. Local System (also). I can't find this right now, and don't know if it's relevant to your question (and I don't do unattended), but by all means - try.

GL

[radix]

I'm not sure if nLite does (all) of this. But this is what you need:

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download]
"CheckExeSignatures"="no"
"RunInvalidSignatures"=dword:1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments]
"SaveZoneInformation"=dword:1

or

In Internet Explorer, click Tools/Internet Options > Security.

Click the Internet icon, then the Custom Level button.

Under Downloads, check the radio button marked Enable under the heading "Automatic prompting for file downloads."

Click OK here and in the next dialog.

GL

Sorry, but don't work!

Try this in a .reg file:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{1B374FEE-7015-4A0C-B3CA-60F0ACCDA425}User\Software\Microsoft\Windows\CurrentVersion\Policies\Associations]
"LowRiskFileTypes"=".exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations]
"LowRiskFileTypes"=".exe"

or add the next two commands in unattended section of nLite:

REG.EXE ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{1B374FEE-7015-4A0C-B3CA-60F0ACCDA425}User\Software\Microsoft\Windows\CurrentVersion\Policies\Associations" /v "LowRiskFileTypes" /t REG_SZ /d ".exe" /f
REG.EXE ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations" /v "LowRiskFileTypes" /t REG_SZ /d ".exe" /f

Need restart to take effect if you run the commands or .reg file from Windows.

Edited June 8, 2008 by radix

[GrofLuigi]

"LowRiskFileTypes"=".exe"

I knew that, I just didn't feel comfortable suggesting a change that could be seen as a real security risk.

BTW, you'd be surprised how many LowRiskFileTypes I have.

GL

[Octopuss]

How is it decided whether this popup shows or not?

[BikinDutchman]

How is it decided whether this popup shows or not?

I believe there is a signing/certification process, just as with drivers.