When you try to open an Excel, Word, or PowerPoint 2010 file from Outlook or from the Internet, Office reports the file as being corrupt and cannot be opened. Although the error message is different for each application, the end result is the same. Errors may include the following:
"The file is corrupted and cannot be opened."
"Word Experienced an error trying to open the file."
"PowerPoint found a problem with content in <filename>. PowerPoint can attempt to repair the presentation."
DCOM security settings do not allow for the temporary file structure that must be created.
Set component security settings back to the defaults:
1. Open Control Panel.
2. Open Administrative Tools.
3. Open Component Services and expand the tree under Console Root to Computers --> My Computer.
4. Right-click My Computer and select Properties.
5. Select the Default Properties tab and set the following values:
Default Authentication Level: Connect
Default Impersonation Level: Identify
In order to open files in Protected View, the following processes must successfully complete:
The initiating process - Outlook or Internet Explorer or (with attachments saved to the hard drive) Windows Explorer, spawns an Office application process.
That process determines that the file is being opened from an Internet location and spawns a second Office application process that runs under restricted permissions. You can see that the process is running in the correct way by looking at its properties in Process Explorer. If a process is running under restricted permissions, there will be a tab labeled "Job."
We create the following folder structure under C:\Users\<username>\AppData\Local\Temp.
OICE_XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX.X (Folder, where X is random generated hex numbers. This folder will have a copy of the original file, and three tmp files in it.) AppData (Folder in OICE_XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX.X) Roaming (Folder in AppData) Microsoft (Folder in Roaming) Templates (Folder in Templates)
When this issue occurs, the sandbox process, running under restricted permissions, is created successfully. The OICE_ folder is created. But we cannot create the files and folders under that. To confirm that this is actually the issue, check under C:\Users\\AppData\Local\Temp. If there is an OICE_XXXXXX-XXXXX-XXX folder, but nothing in it, this is likely to be the problem.