I am trying to run Eclipse java-galileo-SR2-win32 when I get open-file-security-warning. The files are just extracted from a zip file and put into a directory "C:\Users\UserName\AppData\LocalLow\eclipse-java-galileo-SR2-win32\eclipse".

The Internet Explorer settings for adding network drives to the intranet zone do not work on local drives. Also there is no option to 'unblock' the file in the file properties.

What other option is there to turn off this annoying prompt? Or even better be able to select which files are considered safe to run.

3 Answers 3


In the start menu enter gpedit.msc. Then go to:

User Configuration -> Administrative Templates -> Windows Components -> Attachment Manager

and Add *.exe to the "Inclusion list for moderate risk file types" setting.

  • 1
    I want to be able to select which exe are allowed to run, rather than allow all of them. Apr 24, 2010 at 9:37
  • @Menuta: Just a long shot, but you try adding "filename.exe" instead? It appears to work for me
    – Jay Wick
    Apr 29, 2010 at 7:05
  • Thanks for the suggestion, hadn't thought of that, obvious really. I have already moved the files to program files anyway which has bypassed the error. Apr 30, 2010 at 7:38
  • Adding eclipse.exe works great! +1 Jan 21, 2013 at 16:42

The solution is to put the directory where it belongs such as C:\Program Files (x86)\eclipse-java-galileo-SR2-win32\eclipse this the removes the open file security warning dialog. c:\Users\UserName\AppData\LocalLow directory must have similar security as the intranet zone.

  • If anyone knows why the LocalLow folder is restricted like this can you please tell us why? Apr 29, 2010 at 2:25
  • 1
    That is its sole purpose. Trusted data goes in c:\Users\UserName\AppData\Local, untrusted data in ..\LocalLow. My understanding is that, if a pre-Vista program attempts to write to the users application directory (ie what used to be c:\Documents and Settings\UserName\Application Data) then this is magically remapped to either Local, LocalLow or the Roaming subfolder inside c:\Users\UserName\AppData depending on which mode the program is running in. So if program is running in low security mode , then it can only write to LocalLow which is also low security.
    – sgmoore
    May 1, 2010 at 19:45

Is it possible that one of the other files (maybe a dll) is blocked?

Streams from Sysinternals is a handy command line utility which can be used to display NTFS streams on all files in a directory and sub-directories. It can also be used to remove all the streams (assuming that they are all just Zone.Identifiers)

  • I tried that no luck. Apr 27, 2010 at 6:23
  • This is THE solution. streams -s -d "C:\Program Files\Eclipse"
    – gnom1gnom
    Mar 3, 2016 at 9:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.