Outlook Error - Cannot create file when opening an attachment

When you try to open or save an e-mail attachment, you may receive the following error message:

"Cannot create file: file name. Right-click the folder you want to create the file in and click Properties on the shortcut menu to check your permissions for the folder."

This issue may occur when the Temporary Internet Files folder is stored on a server on which you do not have sufficient permissions.

Fix for:

Outlook 2003

If you are using Outlook 2003, follow these steps:

1. Click My Computer, and then double-click drive C.
2. On the File menu, click New, and then click Folder.
3. Name the folder temp0.
4. Click Start, click Run, type regedit, and then click OK.
5. Locate and then click the following registry key: HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Security\
6. In the right pane, double-click OutlookSecureTempFolder.
7. In the Value Data field, type C:\temp0\ and then click OK.
8. Exit Registry Editor.
9. Restart the computer.

Outlook 2010

If you are using Outlook 2010, follow these steps:

1. Click My Computer, and then double-click drive C.
2. On the File menu, click New, and then click Folder.
3. Name the folder temp0.
4. Click Start, click Run, type regedit, and then click OK.
5. Locate and then click the following registry key: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security\
6. In the right pane, double-click OutlookSecureTempFolder.
7. In the Value Data field, type C:\temp0\ and then click OK.
8. Exit Registry Editor.
9. Restart the computer.

Giving SendAs permissions to a distribution Group

Once you have created a distribution group, if you need one user to have sendas permission then do the following in exchange powershell

Set-DistributionGroup GROUPEMAILADDRESS@domain.com -GrantSendOnBehalfto USER@domain.com

to set a multiple group use the following

Set-DistributionGroup GROUPEMAILADDRESS@domain.com -GrantSendOnBehalfto @{Add="USER@domain.com", "USER2@domain.com", "USER3@domain.com"}

to check who has access

Get-DistributionGroup GROUPEMAILADDRESS@domain.com | fl name,grant*

Delete an emailed attachment company wide (Outlook/Exchange)

We had an email go out with the incorrect legal document on it, so we wanted to remove this from everyone's mailbox before it got used accidentally, the following exchange powershell did the trick

Get-Mailbox -ResultSize unlimited | Search-Mailbox -SearchQuery "attachment:'attachment name here.file_extension'" -DeleteContent

Cannot turn off Outlook out of office

If you cannot turn off outlook out of office in the following circumstances

- It is disabled on the client (you can double check on OWA)
- You have started outlook with the /cleanrules switch

The following has just worked for me (you could try without running /cleanrules if that will delete many rules)

- go to http://mfcmapi.codeplex.com/ and download the app

- Close Outlook

- Session > Logon > (select mailbox)

- Select user mailbox from the options

- Look for ‘PR_OOF_STATE’ which should be (incorrectly) set to ‘True’

- (double-click the value and untick the ‘Boolean’ option)

- Close the MFCMAPI application; you can re-open to test, but it should write the change immediately

Citrix Client cannot save to the local network

When you first connect to shared drives on a Citrix session you will get a security warning like the one below

If someone has clicked read only and ticked the do not ask again box.

then to allow read/write access again

For each target environment that is accessed a unique registry key is made in registry with the name
HKCU\SOFTWARE\Citrix\ICA Client\Client Selective Trust\{GUID}. 
It seems that the {GUID} is generated during runtime and (therefore) cannot be predicted. You can find what GUID belongs to what connection by reading the value HKCU\SOFTWARE\Citrix\ICA Client\Client Selective Trust\{GUID}\RegionName\@.
This value contains the name of the environment.

Preventing the message

The message van be configured per resource type, where each resource type is a subkey of ICA Client\Client Selective Trust\{GUID}IcaAuthorizationDecision (no \ after the GUID!).

Resource type	Subkey
Client drives	FileSecurityPermission
Microphones and webcams	MicrophoneAndWebcamSecurityPermission
PDA devices	PdaSecurityPermission
USB and other devices	ScannerAndDigitalCameraSecurityPermission

The access level can be set in the default (@) value where the number represents an access level

Value	Description
0	No access
1	Read access
2	Full access
3	Prompt the user for access

The access level can be set per accessed environment (per GUID) or per region. By configuring the access level on the HKEY_LOCAL_MACHINE (HKLM) hive instead on the HKEY_CURRENT_USER (HKCU) hive the setting is inherited by all users.

If you can to configure the access permission per region you need to change the value of IsIsmDeferalEnabled to true and set the access level per resource type.

The regions that can be configured in HKLM match the regions that can be found (and configured) in Internet Explorer.

Zone	Subkey
Internet	oidInternetRegion
Local Intranet	oidIntranetRegion
Trusted sites	oidTrustedSitesRegion
Restricted sites	oidRestrictedSitesRegion

Keep in mind that if you configure the settings on a x64 operating system the keys are stored inHKLM\SOFTWARE\Wow6432Node\Citrix\ICA Client\Client Selective Trust.

ActiveSync will not connect to Exchange on Phone/Tablet

If you are not able to connect to your Exchange email via a mobile phone/tablet (I've seen this on Android and Windows phone), then the following should allow connection

• Open the Active Directory Users and Computers and go to “View” and select “Advanced Features”

• Find the user who is not able to use the ActiveSync, and double-click him, and go to “Security” tab then click “Advanced"

• Then check the check-box “Include inheritable permissions from this object’s parent” and click OK to close all the other windows

• After this, the user should be able to connect to the server using ActiveSync on the mobile device

VMware VMs appear unexpectedly on two Datastores

The most common reason for this that I have found is that I have mounted an ISO to a virtual machine (usually as CD drive). My ISO's reside on a vmfs volume.

Disconnect the CD drive by right clicking on the relevant VM and clicking on edit settings. You should see the following

Using Exchange Powershell to report on Mailbox Sizes

Here are some useful Exchange 2010 Powershell commands I use regularly to report on where users are filling up our Exchange Databases. 

(note 'MBX-SERVER' is your mailbox server name with the ' removed, "username" is the username and the quotes remain)

Database Size

Get-MailboxDatabase -Status | select name,databasesize,availablenewmailboxspace

Mailbox Size

Get-MailboxStatistics -Server 'MBX-SERVER' | Select DisplayName, ItemCount, TotalItemSize | Sort-Object TotalItemSize -Descending | Export-CSV C:\MailSize.csv

Drops to the csv on the C drive

Show top ten Mailbox folders with most Items on the Mailbox Server

Get-Mailbox –Server 'MBX-SERVER' -ResultSize Unlimited | Get-MailboxFolderStatistics | Sort-Object ItemsInFolder –Descending | Select-Object -First 10 | FT Identity,ItemsInFolder,FolderSize –Wrap

Top Ten folders in one users Mailbox by size

Get-Mailbox -Identity "username" -ResultSize Unlimited | Get-MailboxFolderStatistics -FolderScope All | Sort-Object FolderSize -Descending | Select-Object -First 10 | FT Identity,FolderSize,ItemsInFolder –wrap