New articles and more

Outlook 2007 Security Changes

shahine.com/omar/ — Wed, 21 Jun 2006 05:45:56 GMT

re: New articles and more

Christian — Sat, 24 Jun 2006 21:58:47 GMT

This modell of security is ridiculous and really really dumb.

The whole shield for the outlook object modell itself should just go away WITHOUT checking for a running antivirus.

I don't want to run antivirus-software and I see no point in doing security work like that: Viruses can easily just click "Yes" on that dialog or use redemption themself.

Or they can parse the PST-file directly, there is an open source project out there to parse PST-files.

I don't understand why this half-security is finding supporters among Microsoft.

There is no privilege seperation between the virus/worm and Outlook and so every measure like the object shield is pointless.

The next thing I will do is to find the documentation about this API and try to implement my own "DUMMY virus scanner" that will tell this stupid Security center that I'm fine and have antivirus, thank you.

The people who invent these childish security mesasures must be some of the "low hires" that Mini-msft talks about: Incompetent people with too much time on their hand.

What would be the right emailadress or blog to contact the person in charge of the idea to show confirmations for automation of Outlook unless virus scanner is present?

re: New articles and more

rgregg — Mon, 26 Jun 2006 02:59:55 GMT

Christian,

You've got the right person to talk to about the OM guard behavior. While it was invented and added to Outlook long before I ever was hired on, I'm the guy to talk to about it today.

If you feel that it doesn't provide any benefit for you, you can turn it off completely using the Trust Center in Outlook 2007. Just click on the Programmatic Access tab, and then select the option to never prompt you. Presto, no more warning messages when anyone automates Outlook. Of course, you'll need to be an administrator on your computer to make this decision.

re: New articles and more

Yakov Zhmurov — Thu, 29 Jun 2006 17:06:24 GMT

Ryan,

In MSDN article you wrote: "In Outlook 2007, all COM add-ins are trusted by default".
But my VSTO addin does not start in Office 2007 beta with default security settings. In the COM Add-in manager I see: "Not loaded. Certificate of signed and load at startup COM Add-in is not in trusted source list".

Do you have any idea about such outlook 2007 behavior?