Probably seems like I have posted in the wrong place but....

[scriven_j]

....I am convinced that this is a security thing and so thought this forum might be able to help?

We have just recently moved to a new XP/2003 network running AD but as we are in a migration period, we are essentially running two networks in parallel.

The problem we are currently experiencing (among others!) is to do with security zones within IE6 and IE7.

We want to send out an Email using Outlook (Exchange back-end) with links to Word documents on the old network.

These are stored on http://intranet.domain.co.uk.

This domain has been added to the 'Intranet Zone' and when I navigate to the Intranet Home page it shows as being in the 'Intranet Zone'

When we click on the links in Outlook, IE7 opens up with a dialog box stating 'File download - security warning' 'Do you want to open or save this file?'.

If you select 'Open' (in IE7 - not sure of the exact message in IE6) you get a tab entitled 'Navigation Cancelled' which states 'Navigation to the webpage was canceled. What you can try : Refresh the page'.

If you hover over the 'refresh the page' link then the status bar says 'javascript:location.replace("http://intranet.domain.co.uk/directory/file.doc")'.

When you click on this, you get the 'File download' dialog box again, but when you select 'open' this time, it opens. However, on the status bar, it shows as 'Unknown Zone'.

If I repeat the above procedure, but select 'save' as opposed to 'open', the first time, you get a dialog box which reads 'Windows Internet Explorer' 'Internet Explorer cannot download ...file.doc from intrnaet.domain.co.uk.' 'Internet Explorer was not able to open this Internet site. The requested site is either unavailable or cannot be found. Please try again later.'

The same procedure works without a problem in Firefox. Also, a webpage on the Intranet which has essentially identical html source to the Email with the same links, they work straight away.

Does anyone have any ideas how to resolve or troubleshoot this (apart from using firefox)


Thanks!



Jon

[Bannerd]

You might want to check the security level of the trusted site and the local intranet.

Tools > Internet options Security Tab and turn them to low.

They shouldn't be on high security, I don't even see why they would need to be on medium as the sites are trusted.

See if that helps
_________________
You were to die for, now this life is no more.

[scriven_j]

I changed this from 'custom' to 'low' and the problem still remains.

Interestingly the behaviour slightly changed in that after selecting 'save' from the dialog box, when you click on the 'refresh the page' option from the 'Navigation Canceled(sic)' screen, you get another dialog which reads:-

Security Warning

The current Web page is trying to open a site on your intranet. Do you want to allow this?

Current site: res://ieframe.dll
Intranet site: http://intranet.domain.co.uk

Any more ideas?


Jon

[scriven_j]

Hi,

Just to let you know that I have more information about this problem.

I'm afraid that I didn't include all the information in the first post.

The Intranet where the files are based is using a non-standard port (81) and so the links actually read:-

http://intranet.domain.co.uk:81/directory/file.doc.

The error is also recreated when you type the link directly into a 'run' box.

If I put the site on our external site (which uses port 80) then the problem goes away.

http://www.domain.co.uk/directory/file.doc.

This will be a problem if we can't resolve it though, so any ideas will be gratefully appreciated......


Jon

[gquitugua]

shooting from the hip....I'd say it's a trust/dns issue.
_________________
a pessoa com nenhuma assinatura

[scriven_j]

Any ideas on troubleshooting or resolving it?



Jon

[gquitugua]

You said you set up a new network in parallel. I'm assuming new network = new domain/forest. Did you verify that trusts are established between the two (where the box that is trying to access the file and the box where the document resides).

http://technet2.microsoft.com/WindowsServer/en/library/422bd086-f175-4cbe-ade2-4f9b5399a5b31033.mspx?mfr=true

If you try and access the file from the same box where the file resides on, what happens?

Is there another machine on the same subnet that you can try and access the file?
_________________
a pessoa com nenhuma assinatura

[scriven_j]

Yes, the new network is new domain/forect.

Old network is actually using Samba and NIS+ for Unix (so from the new networks perspective is an NT4 domain).

There is no trust as such set-up between the two networks, however, the login script uses NET USE and old login details to authenticate with machines on the old domain.

Trying to access file from actual server would not be helpful as it is actually a Unix box.

I have tried accessing the file from a machine on the old network (using IE6) and it doesn't work either. I think it is something to do with the fact that we are using a non-standard port, but there is no easy way to get round this. Web server is also a Unix box and cannot be reconfigured without having major knock-on effects.


Jon