mailto not trusted even when click from trusted site with IE7 & Vi - Eri

Here is the scenario:

To ensure ActiveX and such all function properly for our extranet users, we
have them add our sites to their list of Trusted Sites.  IE7 with Vista sets
Protected Mode to On for the Internet zone and sets Protected Mode to Off for
any sites within the Trusted Sites zone.  Just as always, when you click on a
mailto link from within the Internet zone, a new email opens just as it
should which is how things have always been for Trusted Sites as well.  Now
with IE7/Vista, if you click on a mailto link posted on a site within Trusted
Sites, a NEW window opens with Protected Mode ON treating it as though it
were part of the internet zone and not trusted.  The new email opens but not
without first canceling the navigation of the window and displaying an error.

This situation can be confusing for some users.  When switching between
protection modes, you switch browsers as well.  Just as was always the case,
a new page shouldn't even open when creating a new email though now does ONLY
when clicking a mailto from within a trusted site.  So now the user is thrown
to a totally different brower and presented with an error stating IE couldn't
display the webpage.  There is nothing to inform the user that the error
should be ignored and that their session is actually in the browser behind
the one currently active.  They write and send their email and then the
typical response to the error would be to just click Back but this is a new
browser and has no Back history.  Calls then flood our help desk.

Frames just make this issue even more screwed up.  If the page containing
the mailto resides within a frame, there is no problem!  The new email opens
properly with no second browser or error.  If that same page is opened by
itself in the browser, the problem comes back.

It's easy to try.  Just create a page with a mailto, watch the mailto link
work, add the site hosting the page to your trusted sites, refresh, and then
watch the mailto link produce the second browser with the error.

Any ideas?

Thanks!

mailto not trusted even when click from trusted site with IE7 & Vi - Eri

Adding a cross-post.


Here is the scenario:

To ensure ActiveX and such all function properly for our extranet users, we
have them add our sites to their list of Trusted Sites.  IE7 with Vista sets
Protected Mode to On for the Internet zone and sets Protected Mode to Off for
any sites within the Trusted Sites zone.  Just as always, when you click on a
mailto link from within the Internet zone, a new email opens just as it
should which is how things have always been for Trusted Sites as well.  Now
with IE7/Vista, if you click on a mailto link posted on a site within Trusted
Sites, a NEW window opens with Protected Mode ON treating it as though it
were part of the internet zone and not trusted.  The new email opens but not
without first canceling the navigation of the window and displaying an error.

This situation can be confusing for some users.  When switching between
protection modes, you switch browsers as well.  Just as was always the case,
a new page shouldn't even open when creating a new email though now does ONLY
when clicking a mailto from within a trusted site.  So now the user is thrown
to a totally different brower and presented with an error stating IE couldn't
display the webpage.  There is nothing to inform the user that the error
should be ignored and that their session is actually in the browser behind
the one currently active.  They write and send their email and then the
typical response to the error would be to just click Back but this is a new
browser and has no Back history.  Calls then flood our help desk.

Frames just make this issue even more screwed up.  If the page containing
the mailto resides within a frame, there is no problem!  The new email opens
properly with no second browser or error.  If that same page is opened by
itself in the browser, the problem comes back.

It's easy to try.  Just create a page with a mailto, watch the mailto link
work, add the site hosting the page to your trusted sites, refresh, and then
watch the mailto link produce the second browser with the error.

Any ideas?

Thanks!

mailto not trusted even when click from trusted site with IE7 & Vi - Robert Aldwinckle

You're cross-posting to both  Outlook and  WM  NG
so which one is the default  E-mail  app?

To help clarify this switch to a cmd window and enter:

ftype  mailto

and capture the cmd output.


HTH

Robert Aldwinckle
---

mailto not trusted even when click from trusted site with IE7 & Vi - Gary VanderMolen

What is really strange is that the output of "ftype mailto" gives
me Outlook.exe, while Default Programs says Mailto is handled
by Windows Mail. How can there be a conflict like that?

Gary VanderMolen

mailto not trusted even when click from trusted site with IE7 & Vi - Robert Aldwinckle

I don't know but what I would try is making one show for both.
I don't know how successful just changing it with the  ftype  command
would be so probably I would try switching the default (just as a repair)
instead.


Good luck

Robert
---

mailto not trusted even when click from trusted site with IE7 - Eri

ftype reports that Outlook.exe is mapped.

I previously tried switching the mapping to WM and experienced the same
problem.

mailto not trusted even when click from trusted site with IE7 - Eri

I've made an interesting discovery while monitoring registry access by IE.

Whenever a mailto is clicked on a page that is either NOT part of a trusted
site or exists within a frame of a trusted site, the registry entry
HKCU\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\MAILTO\UserChoice
is read.  This entry contains the prog id of the application associated with
mailto.

But!, when I click a mailto hosted in a non-framed page within a trusted
site, the registry key is never checked!  This doesn't make sense.

mailto not trusted even when click from trusted site with IE7 - Eri

There is another item I've discovered.  The times it does not work, Vista is
using the broker IEUser.exe to execute Outlook.

In Vista, if IE requests access to the system that is beyond the current
level permitted by the protected mode, executing of the requested operation
is done through a broker.  There are two brokers being IEUser.exe and
IEInstall.exe.  As in XP, Vista pretty much requires that applications be
installed using an admin account so to work around this in a controlled
manner, it uses IEInstall.exe.  The same type of scenario plays out for
executions but instead uses IEUser.exe.

This still doesn't answer the question.  It doesn't make sense that in one
case the broker must be used but in the other two cases, the broker isn't
needed and a different path is taken through the registry.

mailto not trusted even when click from trusted site with IE7 - Robert Aldwinckle

More security/obscurity?   Perhaps we should be cross-posting
to  Vista Security  too?   <eg>

What happens if you just  Run...  mailto:

E.g. that should just be  explorer.exe  starting  Outlook.exe,
no "broker" required?


Good luck

Robert
---

mailto not trusted even when click from trusted site with IE7 & Vi - keerthi.s

did you get around this problem ..???


--
keerthi.s

mailto not trusted even when click from trusted site with IE7 & Vi - Hal Hostetler [MVP P/I]

Get around what problem?  You hijacked a thread, included NONE of the
original post, and the only clue to what the problem might have been, the
Subject: line, has been clipped so the whole message is no longer there.
Sadly, most folks here aren't very good at mind reading, so I'm afraid
you'll have to repost this message with enough detail for folks to get a
feel for what's actually happening.

Hal
--
Hal Hostetler, CPBE -- hhh@kvoa.com
Senior Engineer/MIS -- MS MVP-Print/Imaging -- WA7BGX
http://www.kvoa.com -- "When News breaks, we fix it!"
KVOA Television, Tucson, AZ.   NBC   Channel 4
Live at Hot Licks - www.badnewsbluesband.com

mailto not trusted even when click from trusted site with IE7 & Vi - keerthi.s

'Hal Hostetler [MVP P/I Wrote:
I am sorry for that, my scenario is..

I have a webapplication working fine in Xp, but now i access the same
application in VISTA, in the home page i have a "mailto" link for the
users to give feedback. In VISTA environment if they click on the mailto
link, a new browser window opens with the 'mailto:<email address> sub :
' (<email address> sub :) etc in the address bar of the new browser and
then my actual default email client "Outlook" opens as desired.
Previously in Xp i never used to get a new browser window.

When i read this post i felt Eric had a similar kind of issue but i am
not much aware of those trusted and non trusted sites handling by IE.

Is there a way i can stop the new browser window from opening? Thank
you in advance.


--
keerthi.s

mailto not trusted even when click from trusted site with IE7 & Vi - Hal Hostetler [MVP P/I]

That's somewhat beyond the scope of this forum, you may want to post this in
one of the developer groups.  I've checked mailto: links on several web
sites (Vista Ultimate SP1 & IE7 on an older Toshiba notebook) and I can't
reproduce this...

Hal
--
Hal Hostetler, CPBE -- hhh@kvoa.com
Senior Engineer/MIS -- MS MVP-Print/Imaging -- WA7BGX
http://www.kvoa.com -- "When News breaks, we fix it!"
KVOA Television, Tucson, AZ.   NBC   Channel 4
Live at Hot Licks - www.badnewsbluesband.com