Microsoft KB Archive/937409

From BetaArchive Wiki

Article ID: 937409

Article Last Modified on 10/27/2007



APPLIES TO

  • Windows Internet Explorer 7, when used with:
    • Windows Vista Enterprise 64-bit edition
    • Windows Vista Home Basic 64-bit edition
    • Windows Vista Home Premium 64-bit edition
    • Windows Vista Ultimate 64-bit edition
    • Windows Vista Business
    • Windows Vista Business N 64-bit Edition
    • Windows Vista Enterprise
    • Windows Vista Home Basic
    • Windows Vista Home Premium
    • Windows Vista Starter
    • Windows Vista Ultimate
  • Windows Internet Explorer 7 for Windows Server 2003 IA64
  • Windows Internet Explorer 7 for Windows XP
  • Windows Internet Explorer 7 for Windows Server 2003



Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect the computer.

SYMPTOMS

You install the May 2007 Cumulative Security Update for Internet Explorer (MS07-027), and then you try to open Windows Internet Explorer 7. After you do this, the File Download – Security Warning dialog box may open, and you may receive the following message:

Do you want to save this file?

The File Download – Security Warning dialog box also refers to the "navcancl" file name. After you close this dialog box, you cannot start Internet Explorer 7.

CAUSE

This problem may occur on a Windows Vista-based computer if the following conditions are true:

  • The "Temporary Internet Files" folder is moved to a location outside the User folder hierarchy. For example, the "Temporary Internet Files" folder is moved to another volume.
  • The Phishing Filter is enabled.
  • Protected mode is enabled.

In this case, the "Temporary Internet Files" folder has insufficient permissions in its new location. Therefore, the Phishing Filter cannot start. When this problem occurs, Internet Explorer 7 cannot start, and the File Download – Security Warning dialog box opens.

This problem may also occur on a Microsoft Windows XP Service Pack 2 (SP2)-based computer or on a Microsoft Windows Server 2003-based computer if one of the following conditions is true:

  • The folder that contains the "Temporary Internet Files" folder has been deleted.
  • The permissions for the "Temporary Internet Files" folder have been changed.

In this case, you cannot write to the folder.

WORKAROUND

To work around this issue, use one of the following methods.

Method 1: Move the "Temporary Internet Files" folder back to its original location

To complete Method 1 on a Windows Vista-based computer, follow these steps:

  1. Click Start [GRAPHIC: Start button], type Internet Options in the Start Search box, and then click Internet Options in the Programs list.
  2. On the General tab, click Settings in the Browsing History area.
  3. Click Move Folder.
  4. In the Please select a folder to which you can add items navigation pane, locate the following folder:

    C:\Users\User_Account_Name\AppData\Local\Microsoft\Windows

  5. Click OK two times.
  6. When you are receive the following message, click Yes:

    Windows will now log you off to finish moving Temporary Internet Files. Do you want to continue?

  7. Log on to Windows Vista again.

To complete Method 1 on a Windows XP-based computer or on a Windows Server 2003-based computer, follow these steps:

  1. Click Start, click Run, type inetcpl.cpl, and then click OK.
  2. On the General tab, click Settings in the Browsing History area.
  3. Click Move Folder.
  4. In the Please select a folder to which you can add items navigation pane, locate the following folder:

    C:\Documents and Settings\username\Local Settings

  5. Click OK, click Apply, and then click OK.

Method 2: Grant permissions to the "Temporary Internet Files" folder

To complete Method 2 on a Windows Vista-based computer, follow these steps:

  1. Click Start [GRAPHIC: Start button], type Internet Options in the Start Search box, and then click Internet Options in the Programs list.
  2. On the General tab, click Settings in the Browsing History area.
  3. Click View Files. The "Temporary Internet Files" folder opens.
  4. In the Windows Explorer address box, click the folder name that comes before Temporary Internet Files.
  5. Click Organize, and then click Properties.
  6. On the Security tab, click Edit.
  7. In the Group or user names box, click the name of the affected user. If the name of the affected user is not listed, follow these steps:
    1. Click Add.
    2. In the Enter the object names to select box, type the name of the affected user, and then click OK.
    3. In the Group or user names box, click the name of the affected user.
  8. In the Permissions for User_Name box, click to select the Full Control check box under the Allow column.
  9. Click Apply, and then click OK.
  10. Close Windows Explorer.
  11. Click OK two times.
  12. Start Internet Explorer 7.

To complete Method 2 on a Windows XP-based computer or on a Windows Server 2003-based computer, follow these steps:

  1. Click Start, click Run, type inetcpl.cpl, and then click OK.
  2. On the General tab, click Settings in the Browsing History area.
  3. Click View Files.
  4. In Windows Explorer, move to the folder that contains the "Temporary Internet Files" folder.
  5. In the right-pane, right-click an empty area, and then click Properties.
  6. On the Security tab, click the name of the affected user in the Group or user names box. If the name of the affected user is not listed, follow these steps:
    1. Click Add.
    2. In the Enter the object names to select box, type the name of the affected user, and then click OK.
    3. In the Group or user names box, click the name of the affected user.
  7. In the Permissions for User_Name box, click to select the Full Control check box under the Allow column.
  8. Click Apply, and then click OK.
  9. Close Windows Explorer.
  10. Click OK two times.
  11. Start Internet Explorer 7.


STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

Warning This workaround may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

You can also work around this problem by turning off the Phishing Filter or by turning off protected mode. However, we do not recommend that you disable these security precautions.


Additional query words: IE IE7 KB931768

Keywords: kbtshoot kbprb kbmsnreachportal KB937409