mailto not trusted even when click from trusted site with IE7 & Vi

Discussion in 'Windows Vista Mail' started by Eric, Apr 30, 2007.

  1. Eric

    Eric Guest

    Adding a cross-post.


    Here is the scenario:

    To ensure ActiveX and such all function properly for our extranet users, we
    have them add our sites to their list of Trusted Sites. IE7 with Vista sets
    Protected Mode to On for the Internet zone and sets Protected Mode to Off for
    any sites within the Trusted Sites zone. Just as always, when you click on a
    mailto link from within the Internet zone, a new email opens just as it
    should which is how things have always been for Trusted Sites as well. Now
    with IE7/Vista, if you click on a mailto link posted on a site within Trusted
    Sites, a NEW window opens with Protected Mode ON treating it as though it
    were part of the internet zone and not trusted. The new email opens but not
    without first canceling the navigation of the window and displaying an error.

    This situation can be confusing for some users. When switching between
    protection modes, you switch browsers as well. Just as was always the case,
    a new page shouldn't even open when creating a new email though now does ONLY
    when clicking a mailto from within a trusted site. So now the user is thrown
    to a totally different brower and presented with an error stating IE couldn't
    display the webpage. There is nothing to inform the user that the error
    should be ignored and that their session is actually in the browser behind
    the one currently active. They write and send their email and then the
    typical response to the error would be to just click Back but this is a new
    browser and has no Back history. Calls then flood our help desk.

    Frames just make this issue even more screwed up. If the page containing
    the mailto resides within a frame, there is no problem! The new email opens
    properly with no second browser or error. If that same page is opened by
    itself in the browser, the problem comes back.

    It's easy to try. Just create a page with a mailto, watch the mailto link
    work, add the site hosting the page to your trusted sites, refresh, and then
    watch the mailto link produce the second browser with the error.

    Any ideas?

    Eric, Apr 30, 2007
    1. Advertisements

  2. You're cross-posting to both Outlook and WM NG
    so which one is the default E-mail app?

    To help clarify this switch to a cmd window and enter:

    ftype mailto

    and capture the cmd output.


    Robert Aldwinckle
    Robert Aldwinckle, May 1, 2007
    1. Advertisements

  3. What is really strange is that the output of "ftype mailto" gives
    me Outlook.exe, while Default Programs says Mailto is handled
    by Windows Mail. How can there be a conflict like that?

    Gary VanderMolen
    Gary VanderMolen, May 1, 2007

  4. I don't know but what I would try is making one show for both.
    I don't know how successful just changing it with the ftype command
    would be so probably I would try switching the default (just as a repair)

    Good luck

    Robert Aldwinckle, May 1, 2007
  5. Eric

    Eric Guest

    ftype reports that Outlook.exe is mapped.

    I previously tried switching the mapping to WM and experienced the same
    Eric, May 1, 2007
  6. Eric

    Eric Guest

    I've made an interesting discovery while monitoring registry access by IE.

    Whenever a mailto is clicked on a page that is either NOT part of a trusted
    site or exists within a frame of a trusted site, the registry entr
    is read. This entry contains the prog id of the application associated with

    But!, when I click a mailto hosted in a non-framed page within a trusted
    site, the registry key is never checked! This doesn't make sense.
    Eric, May 1, 2007
  7. Eric

    Eric Guest

    There is another item I've discovered. The times it does not work, Vista is
    using the broker IEUser.exe to execute Outlook.

    In Vista, if IE requests access to the system that is beyond the current
    level permitted by the protected mode, executing of the requested operation
    is done through a broker. There are two brokers being IEUser.exe and
    IEInstall.exe. As in XP, Vista pretty much requires that applications be
    installed using an admin account so to work around this in a controlled
    manner, it uses IEInstall.exe. The same type of scenario plays out for
    executions but instead uses IEUser.exe.

    This still doesn't answer the question. It doesn't make sense that in one
    case the broker must be used but in the other two cases, the broker isn't
    needed and a different path is taken through the registry.
    Eric, May 2, 2007

  8. More security/obscurity? Perhaps we should be cross-posting
    to Vista Security too? <eg>

    What happens if you just Run... mailto:

    E.g. that should just be explorer.exe starting Outlook.exe,
    no "broker" required?

    Good luck

    Robert Aldwinckle, May 5, 2007
  9. Eric

    keerthi.s Guest

    did you get around this problem ..???
    keerthi.s, Jun 2, 2008
  10. Get around what problem? You hijacked a thread, included NONE of the
    original post, and the only clue to what the problem might have been, the
    Subject: line, has been clipped so the whole message is no longer there.
    Sadly, most folks here aren't very good at mind reading, so I'm afraid
    you'll have to repost this message with enough detail for folks to get a
    feel for what's actually happening.

    Hal Hostetler, CPBE --
    Senior Engineer/MIS -- MS MVP-Print/Imaging -- WA7BGX -- "When News breaks, we fix it!"
    KVOA Television, Tucson, AZ. NBC Channel 4
    Live at Hot Licks -
    Hal Hostetler [MVP P/I], Jun 2, 2008
  11. Eric

    keerthi.s Guest

    I am sorry for that, my scenario is.

    I have a webapplication working fine in Xp, but now i access the sam
    application in VISTA, in the home page i have a "mailto" link for th
    users to give feedback. In VISTA environment if they click on the mailt
    link, a new browser window opens with the 'mailto:<email address> sub
    ' (<email address> sub :) etc in the address bar of the new browser an
    then my actual default email client "Outlook" opens as desired
    Previously in Xp i never used to get a new browser window.

    When i read this post i felt Eric had a similar kind of issue but i a
    not much aware of those trusted and non trusted sites handling by IE

    Is there a way i can stop the new browser window from opening? Than
    you in advance
    keerthi.s, Jun 3, 2008
  12. That's somewhat beyond the scope of this forum, you may want to post this in
    one of the developer groups. I've checked mailto: links on several web
    sites (Vista Ultimate SP1 & IE7 on an older Toshiba notebook) and I can't
    reproduce this...

    Hal Hostetler, CPBE --
    Senior Engineer/MIS -- MS MVP-Print/Imaging -- WA7BGX -- "When News breaks, we fix it!"
    KVOA Television, Tucson, AZ. NBC Channel 4
    Live at Hot Licks -

    Hal Hostetler [MVP P/I], Jun 3, 2008
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.