Q: We’ve noticed that there have been frequent Microsoft security bulletins related to specific file types—especially Microsoft Office documents. Our employees' email communications with people outside of our company rarely require the use of attachments, so we have the luxury of disabling file attachments on our email server (except for a special administrative Inbox, which facilitates the infrequent receipt of attachments). However, several users who are independent contractors have to be able to access other email services, such as their personal POP server, so we can’t prohibit all attachment file types. Is there a way to disable certain attachment file types at the workstation level?
A: Yes, you can disable certain attachment file types. Windows Vista and Windows XP SP2 use Attachment Manager to enforce policies on files received in email messages or saved from the Internet according to the file type and the zone from which the file originated. You can find the Attachment Manager settings in the Microsoft Management Console (MMC) Group Policy Editor (GPE) snap-in by drilling down to User Configuration\Administrative Templates\Windows Components\Attachment Manager. . . .