Forum Discussion

DrDuzi's avatar
DrDuzi
Copper Contributor
Dec 06, 2022

rdp files are no longer opened since version 108

since edge stable version 108 automatically open downloaded rdp files is no longer possible. the option "always open files of this type" is greyed out. 

auto open rdp files works with edge 107.0.1418.35
auto open rdp files works with google chrome 108.0.5359.94
workaround configure group policy autoopenfiletypes
https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-policies#autoopenfiletypes

12 Replies

    • MichaelOliv's avatar
      MichaelOliv
      Iron Contributor

      Hello MikkelLundKnudsen ,

       

      We did this in a device configuration/Administrative Templates and it works :

      { "file_extension": "rdp", "domains": ["domain.com"] }

       

      I hope it could help.

  • StephenFeltmate's avatar
    StephenFeltmate
    Copper Contributor
    We are also experiencing problems with .rdp files in 108 (108.0.1462.42 (Official build) (64-bit)). Some of our users are getting warning messages that the .rdp files from our RDS servers may be dangerous and they are prompted to "Keep" or "Delete"; and also the files are not opening automatically anymore.

    I looked through the list of file types at https://source.chromium.org/chromium/chromium/src/+/main:components/safe_browsing/core/resources/download_file_types.asciipb;drc=af17ad3f07c1d8a24381eb7669bec0c2ffb86521 and .rdp files is not listed. So this is very strange. Why is Edge, after updating to 108, detecting the .rdp files as potentially dangerous?

    I've tried setting the "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings" policy for specific domains and the rdp file type but this does not resolve the problem either. I'm thinking there is some kind of "context" that Edge doesn't like but there is no documentation anywhere on this. The impact is that now, as 108 roles out, we are getting tickets from users wondering why they now have to click "Keep" and then manually open the file - a very good question.
    • JG_DT's avatar
      JG_DT
      Copper Contributor

      StephenFeltmate its funny how we can always find the issue on the internet.  We live and die by the download of the .rdp file and as you pointed out that recently became an issue.  Is there a workaround or solution at hand or are we just at the mercy of MS?

      • StephenFeltmate's avatar
        StephenFeltmate
        Copper Contributor
        ExemptFileTypeDownloadWarnings policy setting works if there is a domain name used in the "full address" field of the .rdp file. I had to update the Administrative Templates to the latest version of Edge as well. It does not work if an IP address is referenced rather than a domain name. I was thinking this might have been a change in the underlying Chromium platform but we do not experience the same thing in Chrome so at this point it is an Edge peculiarity.

        The workaround is to click "Keep" when prompted and then click to open the file. This is very annoying for end users. At this point, my end users are able to access the RDS applications without this prompt. Our admins just have to deal with clicking on "Keep" and then "open file" because there is no way to bypass this if only an ip address is being used in the "full address" field.
    • Kelly_Y's avatar
      Kelly_Y
      Icon for Microsoft rankMicrosoft

      StephenFeltmate DrDuzi Hi!  I've heard from our developer, RDP was added to the  download_file_types.asciipb file with a danger_level of ALLOW_ON_USER_GESTURE.  

       

      If users are getting a warning message that RDP files might be dangerous, enterprises can leverage the ExemptFileTypeDownloadWarnings policy to flag RDP downloads from specific domains as safe.

       

      We are working on updating our documentation with this information.  Thanks! 

       

      -Kelly 

      • MichaelOliv's avatar
        MichaelOliv
        Iron Contributor
        Thanks for the tips.
        With the ExemptFileTypeDownloadWarnings we have no more alert message but "always open files of this type" is still grey out? Does someone has a solution please?
        I think we can use AutoOpenAllowedForURLs and AutoOpenFileTypes but I think in this case it will be restrictive and the user will not have the possibility to add other extension or URL.
    • DrDuzi's avatar
      DrDuzi
      Copper Contributor

      Kelly_Y 
      Yes we have set downloadrestrictions = 1 (Block malicious downloads and dangerous file types)

Resources