Security patch for Outlook 2000/98
_________________________________________________________________________________________________

Bryce

I had just initiated the rollout of the patch last friday (10/20/2000), that was why i was curious
if you had installed it.

(Now installed on 505 of 540 workstations on the LAN, the rest hasn't been logged onto yet, i am stil
working on the WAN/RAS-script)
____________________________________________________________________________________________________

I haven't had any bad experiences after installing it, quite the opposite, users are now prevented from
sending non-valid shortcuts and most trafic of transfering files are moved from the mail-servers to the
file-servers.

Security patch for Outlook 2000/98

When installed it is easy to change settings, works via the Outlook form: Outlook security setting.
So once installed you don't have to change the clients each time you make a change in your
security policy, takes affect next time the users open Outlook.

It is now possible to remove filetypes from Level 1: Files not possible to send and receive, this
wasn't the case in the previous security-patch. So I chose not to install the first patch because i have
several users that gets program updates via mail (selfextracting zip-files), also we have some workstations
that is stil not on the WAN, so we have to mail .mdb files to them.

By default the "Unsafe" (Level1) files are:

.ade Microsoft Access project extension
.adp Microsoft Access project
.bas Microsoft Visual Basic class module
.bat Batch file
.chm Compiled HTML Help file
.cmd Microsoft Windows NT Command script
.com Microsoft MS-DOS program
.cpl Control Panel extension
.crt Security certificate
.exe Program
.hlp Help file
.hta HTML program
.inf Setup Information
.ins Internet Naming Service
.isp Internet Communication settings
.js JScript file
.jse Jscript Encoded Script file
.lnk Shortcut
.mdb Microsoft Access program
.mde Microsoft Access MDE database
.msc Microsoft Common Console document
.msi Microsoft Windows Installer package
.msp Microsoft Windows Installer patch
.mst Microsoft Visual Test source files
.pcd Photo CD image, Microsoft Visual compiled script
.pif Shortcut to MS-DOS program
.reg Registration entries
.scr Screen saver
.sct Windows Script Component
.shb Shell Scrap object
.shs Shell Scrap object
.url Internet shortcut
.vb VBScript file
.vbe VBScript Encoded script file
.vbs VBScript file
.wsc Windows Script Component
.wsf Windows Script file
.wsh Windows Script Host Settings file

Look in Information About the Outlook E-mail Security Update

Erik

[This message has been edited by kholm (edited 25 October 2000).]