View Full Version : Anylink DropDown Menu

04-14-2005, 02:12 PM
Script: AnyLink Drop Down Menu

I'm using the anylink dropdown menu script on my page, and one of the menu's contains links to .exe files on the user's HD for MS Office programs (this is an intranet, so security shouldn't be an issue)

The problem I am having though is anyone using Win XP SP2 cannot open these links. When they try it just sits there and does nothing.

Is there an extra security setting that I need to change? It works fine on SP1.

It is most confusing!


04-15-2005, 08:03 PM
This has nothing to do with the DHTML script, but rather, security settings of Win XP SP2, since the issue affects all links of exe type, not just links embedded inside the menu script. I'm not too familiar with Win XP SP 2 limitations when it comes to executing exe files.

04-15-2005, 10:20 PM
Ok, thanks anyway.

It's just so frustrating! Only a couple of users in the IT dept have SP2 installed (we've been there before, and are trying it out before rolling out to the rest of the users) and they are the ones having the problem. I've tried a comparison between my own machine (running SP1) and a colleague's who is using SP2, and I can see no differences in the IE security settings at all. I even tried turning off the new XP firewall and pop-up blocker, but it makes no difference!

I have posted a question about this on the MS website, and will post back here if I find anything out.


04-18-2005, 12:42 PM
I found out what was causing this problem. Explanation courtesy of MS:

Unable to open local files from Internet Explorer window? IE6 SP1 and later

Problem opening up local files in a Internet Explorer window. For example, the following code works on some systems and does not work in some.

<a href="C:\Filename.TXT" target="_blank">Test</a>

Explanation / Workaround: from Eric Shen [MS]

The issue is a new security feature in Internet Explore 6 Service Pack 1. In order to prevent Internet vicious codes from accessing your local files, the development team developed the new security feature and included it in IE6 SP1. Please be advised that this is a normal behavior. Actually, IE6 SP1 includes new security code checks that prevent "zone elevation". This means that documents located in the "Internet" zone will not be granted access (through HREFs, scripting...etc) to documents in the "My Computer" zone. Only documents located in the "Trusted" or "My Computer" zone can access documents in the "My Computer" zone. Therefore, if you want to allow untrusted documents to access documents in the "My Computer" zone, you might add the source URL in "Trusted sites" (this must be done with caution for obvious security reasons). The "Local Intranet" zone is trusted as well.

Furthermore, the following registry key allows disabling the new security codes check that prevent "zone elevation": - You can create this DWORD key and set it zero to disable this new feature. Also, you can enable it by changing it to 1 at any time.

HKCU\Software\Microsoft\Internet Explorer\Main

Disable_Local_Machine_Navigate = 0 (REG_DWORD)

It is not recommended to use above registry key since it breaks the "zone elevation" security fix. Please use this tweak only if you have a valid reason to do so. The above is a per-user setting.

(XP Service Pack 2) Local Machine restrictions prevents even the Trusted sites from opening files in My Computer Zone

In Windows XP Service Pack 2, no site from any Zone can open files in local machine zone, whereas in pre-SP2, only Internet Zone sites were restricted to open local files, while Trusted/Intranet can.

While the above method (Disable_Local_Machine_Navigate) works fine in Windows XP Service Pack 2 also, here is more information and another workaround for this issue:

Security Zone value 2101 corresponds to URLACTION_FEATURE_ ZONE_ELEVATION
Description: Web sites in less privileged Web content zones can navigate into this zone.

"Tweak" or alter the Lockdown Zone template itself:

Disabling this restriction still breaks the "Zone Elevation" security fix. Use only for valid reasons.

Open Registry Editor and navigate to:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0]

Backup the key to a REG file and in the right-pane, set the value 2101 to 0