Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have spent the last two days reading and trying every solution online, but I cannot figure out the best way to approach this.

We use SCCM to deploy packages and it uses the localsystem account to install the software when run as administrator. This for some reason now causes the open file security prompt.

When running the advertisement as user rights, this prompt does not occur as the GPO policy for users and computer has the domain in the Intranet zone.

I know that the localsystem account does not use these keys and uses the .default key and the only way I have been able to get this to work without getting the prompt is to put the domain in zonemap key for .Default.

Now I don't know if this is the way to fix this or if this causes a security issue. Does anyone have any idea?

And this is only happening on windows 7 machines, not windows XP.

EDIT: example when launching would be \\d$\setup.bat calling msi to install .

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.