Outlook Junk Mail Filter

Usage and Config Patch
1

(imported topic written by jr6591)

I don’t see a fixlet in BES but was wondering if anyone has come across one or has worked on one?

Update for Outlook 2003 Junk Email Filter (KB936030) office2003-KB936030-FullFile-ENU.exe

I assume a task can be built using the exe but I hav not tried.

2

(imported comment written by jr6591)

I’ve created a relevance to find the existence of this patch:

(name of operating system = “Win2000” OR name of operating system = “WinXP”) AND exists regapp “outlook.exe” AND (version of regapp “outlook.exe” = “11”) AND not exists key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9040110900063D11C8EF10054038389C\Patches\4937F697BE364874B9446EFBCE5C79CD” of registry

Any ideas why NES would not have this and does anyone have any comment on the relevance?

3

(imported comment written by BenKus)

Hey jr,

We do not support this update because it is not a security patch or update related to a security patch.

I did not test your relevance in detail, but I notice that it specifically references the user SID of “S-1-5-18” which I think is a standard SID on Windows… I would be worried about if this was the best way to detect the existence of the patch, but if you try it on a few representative computers and it seems to work, then I would be much less worried.

Let us know how it goes,

Ben

4

(imported comment written by jr6591)

I re-wrote my relevance so i can find a file rather than a registry entry.

(name of operating system = “Win2000” OR name of operating system = “WinXP”) AND exists regapp “outlook.exe” AND (version of regapp “outlook.exe” = “11”) AND (not exists (file “C:\Program Files\Microsoft Office\OFFICE11\OUTLFLTR.DAT”) whose (modification time of it = time “Wed, 06 Jun 2007 14:55:48 -0400”))

OR

(name of operating system = “Win2000” OR name of operating system = “WinXP”) AND exists regapp “outlook.exe” AND (version of regapp “outlook.exe” = “11”) AND (not exists (file “C:\Program Files\Microsoft Office\OFFICE11\OUTLFLTR.DAT”) whose (version of it = “1.4.5405.1156”))

Outlook Junk Mail filters are cumulative so the latest version covers you for previous versions.

Question – What could the relevance be if I wasn’t sure where MS Office was Installed thus not knowing where OUTLFLTR.DAT is installed

5

(imported comment written by BenKus)

Hey jr,

I think this would work:

q: file “OUTLFLTR.DAT” of parent folder of regapp “outlook.exe"
A: “OUTLFLTR.DAT” “12.0.0.0” “SmartScreen Data File” " 12.0.5321.1371” “Microsoft Corp.”

And substituting that in your relevance, it would make:

q: (name of operating system = “Win2000” OR name of operating system = “WinXP”) AND exists regapp “outlook.exe” AND (version of regapp “outlook.exe” = “11”) AND (not exists (file “OUTLFLTR.DAT” of parent folder of regapp “outlook.exe”) whose (version of it = “1.4.5405.1156”))
A: False

Ben

6

(imported comment written by jr6591)

Thanks Ben. I will give it a try. But it would be nice if BES had it!