Print View

"A program is trying to automatically send e-mail on your behalf." in Outlook with security settings in Group Policy

Issue

Outlook 2007 can use either public folder security forms or Group Policy to manage security for attachments and for add-ins.

When using configuring the Outlook Security Settings in Group Policy using the 2007 Office system Administrative Template files (outlk12.adm) and the following policy:

Microsoft Office Outlook 2007 | Security | Security Form Settings | Outlook Security Mode | Use Outlook Security Group Policy

Users may be prompted with "A program is trying to automatically send e-mail on your behalf."

If the policy is set as follows, and the appropriate Public Ffolder and form is created, the issue does not exist:

Microsoft Office Outlook 2007 | Security | Security Form Settings | Outlook Security Mode | Use Security Form from 'Outlook Security Settings' Public Folder

Resolution

The Outlook Security Settings are not equivalent between Public Folders and Group Policy.

Specifically the following policies are only available in Public Folders and not in the Group Policy under Microsoft Office Outlook 2007 | Security | Security Form Settings | Programmatic Security:

- When sending items via CDO
- When sending items via Simple MAPI
- When accessing the address book via CDO
- When resolving names via Simple MAPI
- When accessing address information via CDO
- When opening messages via Simple MAPI

Information for administrators about e-mail security settings in Outlook 2007
http://support.microsoft.com/kb/926512

Originally, there were plans to include settings for the following Simple MAPI operations:

- A program sends items by using Simple MAPI
- A program resolves addresses by using Simple MAPI
- A program opens a message by using Simple MAPI

However, these settings were not added to the product in the release version of Outlook 2007. We are researching the ability to add this functionality to the GPO settings. These settings may be included in a future release.

A forthcoming hotfix 953925 and an updated outlk12.adm will address the Simple MAPI operations in Group Policy.

Articles soon to be published:

http://support.microsoft.com/kb/953925

The programmatic security settings cannot be configured successfully when you configure the Simple MAPI settings inĀ  Outlook 2007 by using the Group Policy object
http://support.microsoft.com/kb/953806

References

Customize programmatic settings in Outlook 2007
http://technet.microsoft.com/en-us/library/cc179085.aspx

This is an additional GPO template for Simple MAPI functionality that is NOT currently implemented:
http://theether.net/download/Microsoft/Office/2007/outlk12SimpleMAPI.adm

Simple MAPI console application
http://support.microsoft.com/kb/171096

Products

Microsoft Outlook 2007

Created: 30th April 2008
Updated: 22nd July 2008

Print View

© 2005-2024 Jamie Morrison