Windows Server 2003 blocked unzipped .bat & .exe files?

[Westlander]

When you have a zip file on Windows 2003 server, and in that zip file are .bat & .exe files, Windows doens't show them when you have unzipped it.

 

This is a default security setting in Windows 2003 server.

 

Right click at the zip file and go to properties:

 

 

You see, by the Red arrow Unblock. When you click at that, you can unzip the file. .bat & .exe files won't be blocked anymore.

[Tobie]

I think that the file is blocked only if it is created or copied from another "domain" except your own. Isnt it so?

 

/Tobias

[anyweb]

i know one thing, and that is if you download or save the file with the exe's to a FAT drive (ie: not NTFS) then it will NOT be blocked.

 

I've seen the blocking behaviour on Windows Server 2008 also

 

here's more info on it

 

This is done using NTFS File Streams. There is a stream named "Zone.Identifier" added to downloaded files. When IE7 downloads certain types of file that stream contains:

 

[ZoneTransfer]

ZoneId=3

 

The simplest way to set it is to create a text file with those contents in it, and use more to add it to the alternate stream.

 

Zone.Identifier.txt:

 

[ZoneTransfer]

ZoneId=3

 

Command:

 

more Zone.Identifier.txt > file.exe:Zone.Identifier

 

Then, the way for you to check it would be to try to open the Zone.Identifier stream and look for ZoneId=3, or simply assume that if the stream exists at all that your user will receive that warning.

 

It's also important to note that this has nothing to do with permissions. Administrators see the same warning; it's to do entirely with the source and type of file. The entire stream goes away when users uncheck the "Always ask before opening this file" box and then click Run.