Outlook / Unable to open Enterprise Vault items after September 2017 security patch


Symptom

After installing the September 2017 security patch for Outlook, Veritas Enterprise Vault shortcuts are no longer working.

Cause

This is a known issue which occurs after installing the security updates listed in the following KB articles.

 

After applying this update, custom form script is now disabled by default and requires setting registry keys to re-enable it.

Resolution

To resolve the issue, we took the following actions:

 

1. The new setting has a default value of 1, which indicates form script should not run.  To allow the form scrip to run, first create the following key (if it does not exist).

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Outlook\Security

 

2. Then create DWORD (32-bit) Value 0 and set the name to DisableCustomFormItemScript to enable custom form scripts.

 

3. Once custom form scripts have been enabled, they must then be allowed per form message class. For instance, if you have a form with the message class IPM.Note.Custom, we must register "IPM.Note.Custom" as a trusted form message class. To do this, first create this key: 

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Outlook\Forms\TrustedFormScriptList

 

4. Then, create REG_SZ values in this key for each form you wish to allow scripts to run. In the above example, you would create a REG_SZ value named "IPM.Note.Custom" with empty data.

 

Please Note:  The registry key will be different depending on the office version / build and the OS build (64bit vs. 32bit). Below are the registry keys that were provide by Veritas required to resolve this for each supported configuration.

 

Outlook 2010:

EVClient_OL2010_x64_Win_x64:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Outlook\Forms\TrustedFormScriptList]
"IPM.Note.EnterpriseVault.PendingArchive"=""
"IPM.Note.EnterpriseVault.PendingArchive.ArchiveMe"=""
"IPM.Note.EnterpriseVault.Shortcut.DeleteMe"=""
"IPM.Note.EnterpriseVault.Shortcut.RestoreMe"=""
"IPM.Note.EnterpriseVault.Shortcut"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Outlook\Security]
"DisableCustomFormItemScript"=dword:00000000

EVClient_OL2010_x86_Win_x64:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\14.0\Outlook\Forms\TrustedFormScriptList]
 "IPM.Note.EnterpriseVault.PendingArchive"=""
 "IPM.Note.EnterpriseVault.PendingArchive.ArchiveMe"=""
 "IPM.Note.EnterpriseVault.Shortcut.DeleteMe"=""
 "IPM.Note.EnterpriseVault.Shortcut.RestoreMe"=""
 "IPM.Note.EnterpriseVault.Shortcut"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\14.0\Outlook\Security]
 "DisableCustomFormItemScript"=dword:00000000

EVClient_OL2010_x86_Win_x86:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Outlook\Forms\TrustedFormScriptList]
"IPM.Note.EnterpriseVault.PendingArchive"=""
"IPM.Note.EnterpriseVault.PendingArchive.ArchiveMe"=""
"IPM.Note.EnterpriseVault.Shortcut.DeleteMe"=""
"IPM.Note.EnterpriseVault.Shortcut.RestoreMe"=""
"IPM.Note.EnterpriseVault.Shortcut"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Outlook\Security]
 "DisableCustomFormItemScript"=dword:00000000

 

Outlook 2013:

EVClient_OL2013_x64_Win_x64:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\Outlook\Forms\TrustedFormScriptList]
"IPM.Note.EnterpriseVault.PendingArchive"=""
"IPM.Note.EnterpriseVault.PendingArchive.ArchiveMe"=""
"IPM.Note.EnterpriseVault.Shortcut.DeleteMe"=""
"IPM.Note.EnterpriseVault.Shortcut.RestoreMe"=""
"IPM.Note.EnterpriseVault.Shortcut"=""
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\Outlook\Security] 
"DisableCustomFormItemScript"=dword:00000000

EVClient_OL2013_x86_Win_x64:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\15.0\Outlook\Forms\TrustedFormScriptList]
"IPM.Note.EnterpriseVault.PendingArchive"=""
"IPM.Note.EnterpriseVault.PendingArchive.ArchiveMe"=""
"IPM.Note.EnterpriseVault.Shortcut.DeleteMe"=""
"IPM.Note.EnterpriseVault.Shortcut.RestoreMe"=""
"IPM.Note.EnterpriseVault.Shortcut"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\15.0\Outlook\Security]
 "DisableCustomFormItemScript"=dword:00000000

EVClient_OL2013_x86_Win_x86:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\Outlook\Forms\TrustedFormScriptList]
"IPM.Note.EnterpriseVault.PendingArchive"=""
"IPM.Note.EnterpriseVault.PendingArchive.ArchiveMe"=""
"IPM.Note.EnterpriseVault.Shortcut.DeleteMe"=""
"IPM.Note.EnterpriseVault.Shortcut.RestoreMe"=""
"IPM.Note.EnterpriseVault.Shortcut"=""
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\Outlook\Security]
 "DisableCustomFormItemScript"=dword:00000000

 

Outlook 2016:

EVClient_OL2016_x64_Win_x64:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\Outlook\Forms\TrustedFormScriptList]
"IPM.Note.EnterpriseVault.PendingArchive"=""
"IPM.Note.EnterpriseVault.PendingArchive.ArchiveMe"=""
"IPM.Note.EnterpriseVault.Shortcut.DeleteMe"=""
"IPM.Note.EnterpriseVault.Shortcut.RestoreMe"=""
"IPM.Note.EnterpriseVault.Shortcut"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\Outlook\Security]
 "DisableCustomFormItemScript"=dword:00000000

EVClient_OL2016_x86_Win_x64:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Outlook\Forms\TrustedFormScriptList]
"IPM.Note.EnterpriseVault.PendingArchive"=""
"IPM.Note.EnterpriseVault.PendingArchive.ArchiveMe"=""
"IPM.Note.EnterpriseVault.Shortcut.DeleteMe"=""
"IPM.Note.EnterpriseVault.Shortcut.RestoreMe"=""
"IPM.Note.EnterpriseVault.Shortcut"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Outlook\Security]
"DisableCustomFormItemScript"=dword:00000000

EVClient_OL2016_x86_Win_x86:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\Outlook\Forms\TrustedFormScriptList]
"IPM.Note.EnterpriseVault.PendingArchive"=""
"IPM.Note.EnterpriseVault.PendingArchive.ArchiveMe"=""
"IPM.Note.EnterpriseVault.Shortcut.DeleteMe"=""
"IPM.Note.EnterpriseVault.Shortcut.RestoreMe"=""
"IPM.Note.EnterpriseVault.Shortcut"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\Outlook\Security]
 "DisableCustomFormItemScript"=dword:00000000

More Information

Fixes or workarounds for recent issues in Outlook for Windows

https://support.office.com/en-us/article/Fixes-or-workarounds-for-recent-issues-in-Outlook-for-Windows-ecf61305-f84f-4e13-bb73-95a214ac1230

Custom form script is now disabled by default

https://support.office.com/en-us/article/Custom-form-script-is-now-disabled-by-default-bd8ea308-733f-4728-bfcc-d7cce0120e94

Email retrieval fails after installing Security Patch for Outlook 2010, 2013 and 2016

https://www.veritas.com/support/en_US/article.000127958


Comments (2)

  1. Jakob says:

    Hi Mike,
    thank you for this article. But it seems that there are more MS/Office Updates around which breake Enterprise Vault functionalities. The shortcut topic is not only related to the KB Updates named in the Veritas article. We have some Clients which have the same issue where the named updates are not installed. After making the registry changes Outlook & EV-AddIn are working again as expected.
    There are is also other actual EV-Issues after installing MS /Office Patches as you see here: https://www.veritas.com/support/en_US/article.000128053
    A third issue exists with searching items in the virtual vault with the outlook search. This topic is under investigation at Veritas&MS since a few months and no solution is in sight.
    So.. using & managing EV with Outlook right now is not so funny at the moment.

    1. Thanks for pointing out that other issue. You are correct! Anything after the September 2017 patch will include the new security fixes that require these extra keys to execute custom form scripts. Also, the issue you mentioned is a known side effect of installing the October 2017 PU and is documented here: https://support.office.com/en-us/article/Outlook-Home-Page-feature-is-missing-in-folder-properties-d207edb7-aa02-46c5-b608-5d9dbed9bd04

Skip to main content