Exchange Messaging Outlook Volume 7, Number 2

Information on this page is several years old and may be out-of-date; some links may not work.

Greetings! Welcome to Vol. 7, No. 2, 5 Jun 2002, of Exchange Messaging Outlook, a biweekly newsletter about Microsoft Exchange and Microsoft Outlook.

Today's highlights:
  • Critical Exchange 2000 security patch
  • IE patch plugs IFRAME holes in Outlook
  • Moving Outlook .pst files to a new Outlook 2002 machine
  • Minimizing the Outlook 2002 Address Bar
  • Canceling the "Cancel Request" dialog

Critical Exchange 2000 security patch

Microsoft Security Bulletin MS02-025, Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources (, warns of a vulnerability that could allow a denial-of-service attack using a message with a malformed attribute. A patch is available at to ensure that the Exchange 2000 store immediately rejects a message with malformed attributes, rather than trying to process it. This update also appears to incorporate several hotfixes released earlier, including one to resolve the problem with OWA displaying items in public contacts folders as posts, not contacts.

IE patch plugs IFRAME holes in Outlook

Microsoft Security Bulletin MS02-023, 15 May 2002 Cumulative Patch for Internet Explorer (, stops the Klez virus and other viruses that exploit the <IFRAME> tag in HTML messages dead in their tracks. It makes a change in the Restricted Sites zone so that frames no longer work in that zone. The update also fixes six more vulnerabilities in Internet Explorer, some of which could potentially be exploited in HTML mail messages. Updates are available for IE 6.0, 5.5 SP2, 5.5 SP1, and 5.01 SP2.

This update will cause a change in the appearance of the Find pane in Outlook 2000 and the Organize pane in Outlook 2000 and 2002. The problem is that one of the fixes prevents the loading of the cascading style sheet used for those panes, which are controlled by HTML code in an Outlook resource .dll. It actually affects all applications that use a locally stored style sheet .css file, not just Outlook. Locally stored .css files now load only if the calling web page is from a domain listed in the Trusted Sites zone. We think the benefit of the greater security protection outweighs this annoyance, which is largely cosmetic (at least where Outlook is concerned).

Moving Outlook .pst files to a new Outlook 2002 machine

Long-time users of Microsoft Outlook know that it's relatively easy to relocate a Personal Folders .pst file from one folder or drive to another. Just exit Outlook, move the file, then restart Outlook. When Outlook says it can't find the .pst file, you'll have an opportunity to point to the new location.

The process isn't quite as easy if you're moving to a new computer, partly because of the sheer size of many .pst files and partly because you may have already set up Outlook with a profile on the new machine. The first step, of course, is to locate the .pst file(s) you want to move. In the Folder List, right-click the top level of your main file (the one with the clock and house icon), choose Properties, then click Advanced. Make a note of the filename. Do the same with any other .pst files in the folder list. Then exit Outlook.

You now know where the .pst files reside and can copy them to the new machine. If you don't have a network connection between the systems, you'll have to transfer the .pst files with removable media. A Zip disk works well if you have a Zip drive on both machines. You can also burn a .pst file to a CD, but you won't be able to open it from the CD. Instead, you'll need to copy the .pst file from the CD to the new machine, then bring up the file's properties and uncheck the Read-only box.

So, now you should have the .pst files on the new machine and be ready to make Outlook 2002 recognize them. One way to do this is to create a new profile. Start the Mail applet from Control Panel, click Show Profiles, then Add. When the E-mail Accounts dialog appears, don't add an account. Instead, choose View or change existing e-mail accounts, and then click Next. On the next screen, click New Outlook Data File and specify the location of your main .pst file. Finish up by adding mail accounts with the Add button and any other .pst files with the New Outlook Data File button. Click Finish when you're done. You can go ahead and start Outlook with this new profile now.

An alternative approach, if you already have a new profile that you want to use, would be to check the location of the existing .pst file in the profile, then rename that file and start Outlook. Outlook should ask for the location of the missing .pst file, and you can point it to the file that you copied from the old system. You can open the renamed file by choosing File | Open | Outlook Data File.

One of the first things to check after you start Outlook with a new default .pst file is that your Contacts folder is set up to work with the Outlook Address Book (which Outlook should have installed in the new profile by default). Right-click the Contacts folder, choose Properties, then peek at the Outlook Address Book tab.

If you were using Outlook 2002 on the old machine, you should also take a look at the Rules Wizard. You'll probably need to modify any rules that moved or copied items to particular folders, pointing them to the folders in the transferred .pst file. (The same applies if you import a .rwz file.)

See for more information on where Outlook stores key files that you might want to transfer.

Minimizing the Outlook 2002 Address Bar

Call it a feature or an annoyance: You'll certainly find mixed opinions about the "Address Bar" that appears in Outlook 2002 over the list of items in a folder. The left side includes Back and Next buttons that recall previous folders you've accessed. Also on the left is the name of the folder. On the right, you'll see an Address box and other web controls.

This Address box is probably a remnant of the Local Store and Office Designer features that were pulled from Office XP and would have allowed you to work with items in an Exchange 2000 mailbox or public folders with a powerful web interface, even when offline. Outlook already has a Web toolbar built in, so the Address box is just duplication.

I personally find the Back and Next buttons somewhat useful, though again they're duplicates of buttons already present on the Advanced toolbar. Since I keep the Outlook Bar visible, but not the Folder List, the folder name button provides a convenient way to select a folder that doesn't have an Outlook Bar shortcut. You can also drag items to the folder name button and have the folder list drop-down so you can select a target folder.

But if you keep the Folder List open, the whole Address Bar is just an annoyance taking up screen real estate. Because it's technically not a toolbar, you can't turn it off with the View, Toolbars menu. The best you can do is drag the Address section over to the right as far as it will go, so that the screen is at least less cluttered.

Another solution for hiding the Address section is to modify the registry. (Always make a backup first!) In the HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Outlook\Options key, set the value for AddressBarWidth to 1. (Setting it to 0 won't work -- that just opens the Address Bar to its full width on startup.)

Canceling the "Cancel Request" dialog

Another new Outlook 2002 feature is a Cancel Request dialog box that appears when Outlook detects a too-slow connection to Exchange Server. Previous versions of Outlook would just appear to hang when an Exchange connection took a while. Outlook 2002 provides this dialog with the option to cancel the request. Some users on sluggish networks find it intrusive, though. The article at Q293650 explains how to disable the article or change its behavior so that it waits longer.

More Information

Click here to subscribe to the Exchange Messaging Outlook newsletter. 
Exchange Messaging Outlook Newsletter back issues
ISSN 1523-7990 Copyright 1996-2015, Slipstick Systems and CDOLive LLC. All rights reserved.

Updated Sunday January 04 2015

Copyright Slipstick Systems. All rights reserved.
Send comments using our Feedback page

Back to Top