You are currently offline, waiting for your internet to reconnect

Problems with "Run Only Allowed Windows Application"

This article was previously published under Q178723
This article has been archived. It is offered "as is" and will no longer be updated.


IMPORTANT: This article contains information about editing the registry.Before you edit the registry, make sure you understand how to restore itif a problem occurs. For information on how to do this, view the "Restoringthe Registry" online Help topic in Regedit.exe or the "Restoring a RegistryKey" online Help topic in Regedt32.exe.
SYMPTOMS
When you attempt to start an application by opening an associated document,the application fails to start and you receive the following error message:

Restrictions: This operation has been cancelled due to restrictions in
effect on this computer. Please contact your system administrator.


This error occurs when there is a System Policy in effect that enables theitem marked "Run only allowed Windows applications."

This error is expected behavior if your application's executable is not inthe List of allowed applications dialog box. However, in this case, theapplication is restricted even though it is included in this list.
CAUSE
The shell restriction implemented by the "Run only allowed Windowsapplications" policy does not correctly parse file associations when theexecutable path contains a space.

For instance, if a document of type TEST1 were opened by the applicationAPP1 with the path C:\Program Files\APP1\Binary Files\APP1.EXE %1, youwould encounter this problem when double-clicking on a TEST1 document.
RESOLUTION
Use one or more of the following methods to resolve this problem:

Method 1

To resolve this problem on computers that have Internet Explorer 4.0 orearlier or that have Internet Explorer 4.01 or later installed but not theDesktop Update Component (Active Desktop), obtain the latest service packfor Windows NT version 4.0.

To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in theMicrosoft Knowledge Base:
152734 How to Obtain the Latest Windows NT 4.0 Service Pack

NOTE: Internet Explorer 4.0 with the Desktop Update Component, ships withits own version of Shell32.dll. Installing this fix may cause InternetExplorer not to function correctly.

Method 2

Install Internet Explorer 4.01 SP1 and select the Desktop UpdateComponent.

Method 3

On systems running the earlier version of Internet Explorer 4.0 or notrunning Internet Explorer at all, you may be able to work around thisproblem by either surrounding the entire association executable path withquotes, or by altering the executable path into its equivalent 8.3 format.To do this:

  1. Run Registry Editor (Regedt32.exe).
  2. Go to the following key:
    HKEY_CLASSES_ROOT\<application>\shell\open\command

    where <application> is the application name of the associated files you are attempting to open.
  3. Modify the (Default) string value from its current path, for example,C:\Program Files\APP1\Binary Files\APP1.EXE %1, to one of the following:

    "C:\Program Files\APP1\Binary Files\APP1.EXE %1" (notice the quotes)

    -or-
    C:\PROGRA~1\APP1\BINARY~1\APP1.EXE %1 (no quotes needed)

    NOTE: Use dir /x to determine 8.3 equivalents of long file names.
STATUS
Microsoft has confirmed that this is a problem in Windows NT 4.0 and Windows NT Server 4.0, Terminal Server Edition. This problem was first corrected in Windows NT 4.0 Service Pack 4.0 and Windows NT Server 4.0, Terminal Server Edition Service Pack 4.
Properties

Article ID: 178723 - Last Review: 12/05/2015 08:16:00 - Revision: 2.2

Microsoft Windows NT Server 4.0, Terminal Server Edition, Microsoft Windows NT Workstation 4.0 Developer Edition, Microsoft Windows NT Server 4.0 Standard Edition

  • kbnosurvey kbarchive kbhotfixserver kbqfe kbbug kbqfe KB178723
Feedback