Overview

When using Outlook 2013 and Data control, the following two operations may occur:

• Files attached to an email are detected and blocked by Data control
• Files dragged into the email body do not get detected and blocked by Data control

Operating System: Windows 8/8.1

When a file is dragged into an email in Outlook 2013, it does not get dragged from the original location, it gets moved via a TEMP location and it is this TEMP location that triggers the file transfer action.

The default TEMP location is:

C:\Users\[USER]\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\<STRING>\

By default, this folder is an excluded location so any files transferred from here will not be detected by Data control.

The following sections are covered:

• What to do
• Feedback and contact

Applies to the following Sophos products and versions
Sophos Anti-Virus for Windows 2000+

What to do

To check the temporary location being used, access the following registry key:

HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Security

In this key is the value OutlookSecureTempFolder, which contains the folder string of the TEMP location being used.

To allow detection of files, the TEMP location will need changing to a location that will be scanned (for example, C:\users\[USER]\Desktop\test\). This can be done via two methods:

Change the location on the local computer:

1. Close Outlook
2. Access the following registry key:
   
   HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Security
   
   
3. Modify the value OutlookSecureTempFolder to a different location
4. Access the following registry key :
   
   HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\15.0\Outlook\Security
   
   
5. Modify the value OutlookSecureTempFolder to the same location as above.
   
   Note: The registry keys detailed above may not appear if not already manually set or configured via GPO so may need creating.
   The file will show as being attached to the email. However, when trying to send, an Access denied message will appear.
   
   
6. Launch Outlook
   
   Note: If Outlook is not closed before modifying the value it will reset to the default location

Set the location via GPO

1. This requires the Office 2013 Administrator Template files (ADMX/ADML) and Office Customization Tool

Feedback and contact

If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article.
This is invaluable to us to ensure that we continually strive to give our customers the best information possible.