Information on this page is several years old and may be out-of-date;
some links may not work.
Greetings! Welcome to Vol. 7, No. 2, 5 Jun 2002, of Exchange Messaging
Outlook, a biweekly newsletter about Microsoft Exchange and
- Critical Exchange 2000 security patch
- IE patch plugs IFRAME holes in Outlook
- Moving Outlook .pst files to a new Outlook 2002 machine
- Minimizing the Outlook 2002 Address Bar
- Canceling the "Cancel Request" dialog
Critical Exchange 2000 security patch
Microsoft Security Bulletin MS02-025, Malformed Mail Attribute
can Cause Exchange 2000 to Exhaust CPU Resources (http://www.microsoft.com/technet/security/bulletin/MS02-025.asp),
warns of a vulnerability that could allow a denial-of-service attack
using a message with a malformed attribute. A patch is available at
to ensure that the Exchange 2000 store immediately rejects a message
with malformed attributes, rather than trying to process it. This
update also appears to incorporate several hotfixes released
earlier, including one to resolve the problem with OWA displaying
items in public contacts folders as posts, not contacts.
IE patch plugs IFRAME holes in Outlook
Microsoft Security Bulletin MS02-023, 15 May 2002 Cumulative
Patch for Internet Explorer (http://www.microsoft.com/technet/security/bulletin/MS02-023.asp),
stops the Klez virus and other viruses that exploit the <IFRAME> tag
in HTML messages dead in their tracks. It makes a change in the
Restricted Sites zone so that frames no longer work in that zone.
The update also fixes six more vulnerabilities in Internet Explorer,
some of which could potentially be exploited in HTML mail messages.
Updates are available for IE 6.0, 5.5 SP2, 5.5 SP1, and 5.01 SP2.
This update will cause a change in the appearance of the Find
pane in Outlook 2000 and the Organize pane in Outlook 2000 and 2002.
The problem is that one of the fixes prevents the loading of the
cascading style sheet used for those panes, which are controlled by
HTML code in an Outlook resource .dll. It actually affects all
applications that use a locally stored style sheet .css file, not
just Outlook. Locally stored .css files now load only if the calling
web page is from a domain listed in the Trusted Sites zone. We think
the benefit of the greater security protection outweighs this
annoyance, which is largely cosmetic (at least where Outlook is
Moving Outlook .pst files to a new
Outlook 2002 machine
Long-time users of Microsoft Outlook know that it's relatively
easy to relocate a Personal Folders .pst file from one folder or
drive to another. Just exit Outlook, move the file, then restart
Outlook. When Outlook says it can't find the .pst file, you'll have
an opportunity to point to the new location.
The process isn't quite as easy if you're moving to a new
computer, partly because of the sheer size of many .pst files and
partly because you may have already set up Outlook with a profile on
the new machine. The first step, of course, is to locate the .pst
file(s) you want to move. In the Folder List, right-click the top
level of your main file (the one with the clock and house icon),
choose Properties, then click Advanced. Make a note of
the filename. Do the same with any other .pst files in the folder
list. Then exit Outlook.
You now know where the .pst files reside and can copy them to the
new machine. If you don't have a network connection between the
systems, you'll have to transfer the .pst files with removable
media. A Zip disk works well if you have a Zip drive on both
machines. You can also burn a .pst file to a CD, but you won't be
able to open it from the CD. Instead, you'll need to copy the .pst
file from the CD to the new machine, then bring up the file's
properties and uncheck the Read-only box.
So, now you should have the .pst files on the new machine and be
ready to make Outlook 2002 recognize them. One way to do this is to
create a new profile. Start the Mail applet from Control Panel,
click Show Profiles, then Add. When the E-mail
Accounts dialog appears, don't add an account. Instead, choose
View or change existing e-mail accounts, and then click Next.
On the next screen, click New Outlook Data File and specify
the location of your main .pst file. Finish up by adding mail
accounts with the Add button and any other .pst files with the New
Outlook Data File button. Click Finish when you're done. You can go
ahead and start Outlook with this new profile now.
An alternative approach, if you already have a new profile that
you want to use, would be to check the location of the existing .pst
file in the profile, then rename that file and start Outlook.
Outlook should ask for the location of the missing .pst file, and
you can point it to the file that you copied from the old system.
You can open the renamed file by choosing File | Open | Outlook
One of the first things to check after you start Outlook with a
new default .pst file is that your Contacts folder is set up to work
with the Outlook Address Book (which Outlook should have installed
in the new profile by default). Right-click the Contacts folder,
choose Properties, then peek at the Outlook Address Book tab.
If you were using Outlook 2002 on the old machine, you should
also take a look at the Rules Wizard. You'll probably need to modify
any rules that moved or copied items to particular folders, pointing
them to the folders in the transferred .pst file. (The same applies
if you import a .rwz file.)
https://www.slipstick.com/config/backup.htm for more information
on where Outlook stores key files that you might want to transfer.
Minimizing the Outlook 2002
Call it a feature or an annoyance: You'll certainly find mixed
opinions about the "Address Bar" that appears in Outlook 2002 over
the list of items in a folder. The left side includes Back and Next
buttons that recall previous folders you've accessed. Also on the
left is the name of the folder. On the right, you'll see an Address
box and other web controls.
This Address box is probably a remnant of the Local Store and
Office Designer features that were pulled from Office XP and would
have allowed you to work with items in an Exchange 2000 mailbox or
public folders with a powerful web interface, even when offline.
Outlook already has a Web toolbar built in, so the Address box is
I personally find the Back and Next buttons somewhat useful,
though again they're duplicates of buttons already present on the
Advanced toolbar. Since I keep the Outlook Bar visible, but not the
Folder List, the folder name button provides a convenient way to
select a folder that doesn't have an Outlook Bar shortcut. You can
also drag items to the folder name button and have the folder list
drop-down so you can select a target folder.
But if you keep the Folder List open, the whole Address Bar is
just an annoyance taking up screen real estate. Because it's
technically not a toolbar, you can't turn it off with the View,
Toolbars menu. The best you can do is drag the Address section over
to the right as far as it will go, so that the screen is at least
Another solution for hiding the Address section is to modify the
registry. (Always make a backup first!) In the
key, set the value for AddressBarWidth to 1. (Setting it to 0 won't
work -- that just opens the Address Bar to its full width on
Canceling the "Cancel Request" dialog
Another new Outlook 2002 feature is a Cancel Request dialog box
that appears when Outlook detects a too-slow connection to Exchange
Server. Previous versions of Outlook would just appear to hang when
an Exchange connection took a while. Outlook 2002 provides this
dialog with the option to cancel the request. Some users on sluggish
networks find it intrusive, though. The article at
explains how to disable the article or change its behavior so that
it waits longer.