Symptoms

You configure the Simple MAPI settings in Microsoft Office Outlook 2007 by using the Group Policy object. When you do this, the programmatic security settings cannot be configured successfully.

Resolution

To resolve this issue, install hotfix 953925, and then enable the hotfix by configuring the corresponding registry entries. To do this, follow these steps. Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in Windows

  1. Install hotfix 953925.For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:

    953925 Description of the Outlook 2007 hotfix package: June 11, 2008

  2. Set the value data of one or more of the following registry entries to 1 (Default, PromptUser), to 2 (AutoApprove), or to 0 (AutoDeny):

    • PromptSimpleMAPISend

    • PromptSimpleMAPINameResolve

    • PromptSimpleMAPIOpenMessage

    For example, to set the value data of the PromptSimpleMAPISend registry entry to 1, follow these steps:

    1. Click Start, click Run, type regedit, and then click OK.

    2. Locate and then click the following registry subkey:

      HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Outlook\SecurityNote: If this registry path does not exist, please create it manually.

    3. On the Edit menu, point to New, and then click DWORD Value.

    4. Type PromptSimpleMAPISend, and then press ENTER.

    5. Right-click PromptSimpleMAPISend, and then click Modify.

    6. In the Value data box, type 1, and then click OK.

    7. Exit Registry Editor.

You can deploy this registry data by using one of the following methods:

  • Group Policy

  • A logon script

  • An update file (.msp) that is created by the Office Customization Tool (Outlook 2007)

For more information about how to deploy these Simple MAPI settings by using a custom Group Policy template, see the "More information" section.

To deploy the Simple MAPI settings using a custom Group Policy template, follow these steps:

  1. Download and extract the following custom Group Policy template from the Microsoft Download Center:http://download.microsoft.com/download/F/C/2/FC287493-FEE3-4E1B-8100-924E851744BE/Outlk12-simplemapi.adm

  2. If you do not already have the main Group Policy template for Outlook 2007, download and extract the latest template from the Microsoft Download Center:http://www.microsoft.com/download/details.aspx?displaylang=en&FamilyID=73d955c0-da87-4bc2-bbf6-260e700519a8

  3. Add the Outlk12.adm file that you downloaded in step 2 to your domain controller.Note The steps to add the .adm file to a domain controller vary, depending on the version of Windows that you are running. Also, because you may be applying the policy to an organizational unit (OU) and not to the whole domain, the steps may vary in this aspect of applying a policy. Therefore, check your Windows documentation for more information.

  4. Add the custom Outlk12-simplemapi.adm file that you downloaded in step 1 to your domain controller.

  5. Under User Configuration, expand Classic Administrative Templates (ADM) to locate the policy node for your template.Note In Windows XP and Windows Server 2003, expand Administrative Templates.The following screen shot shows the Simple MAPI policy settings for Outlook 2007 in the Group Policy Management Console when both .adm files that are referenced in the previous steps are installed.Screen shot for Group Policy.

  6. In order for Exchange Security Form settings to be set using Group Policy, you must set the Outlook Security Mode setting to "Use Outlook Security Group Policy". To locate that policy setting expand Classic Administrative Templates (ADM), Microsoft Office Outlook 2007, Security, then click on Security Form Settings. In the details pane, double-click Outlook Security Mode. Enable the policy and set it to Use Outlook Security Group Policy, as shown in the following screenshot.Screen shot for Outlook Security Mode

  7. The Simple MAPI options are located in the left pane under Security Forms Settings, in the Programmatic Security node (see the screenshot in step 5 above). To configure the Simple MAPI options, double-click any policy setting in the details pane. For example, double-click Configure Simple MAPI sending prompt to configure what happens when a program attempts to send mail programmatically using SimpleMAPI.

  8. In the dialog box for the policy setting, click Enabled to enable the policy and set the desired behavior in the Guard Behavior drop-down.For example, the following screenshot shows the Guard Behavior options for the Configure Simple MAPI sending prompt setting.Screen shot for the Guard Behavior

  9. After you finish configuring your Simple MAPI policies, and they have been propagated to your Outlook clients, you can verify that the policies are available to Outlook by examining the following subkey in the registry:HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Outlook\SecurityThe following screen shot shows the registry of an Outlook client on which all three Simple MAPI policies have been configured.Screen shot for the registry Note: The Outlook Security Mode group policy setting that you set in step 6 created the AdminSecurityMode value and set it to 3. This indicates that Outlook will use group policy for managing programmatic security.

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.