Frequently Asked Questions
Frequently Asked Questions
How to control vault application pre-approval in M-Files 2018
Posted by Sakari Heinonen (M-Files) on 14 April 2018 12:11 PM

In M-Files 2018 and later, the vault approval process is improved; The approval is requested with a single prompt instead of asking approval for each individual application.

M-Files administrator may wish to pre-approve certain vault applications to avoid pop-ups for the user requesting application approval. This can be done by distributing a registry key to clients that specifies the vault GUID, the application GUID, and the application checksum.

The vault GUID can be copied from M-Files Admin (in the vault properties dialog), the application GUID appears in the application definition file, and the checksum can be seen on the last line of the application security dialog (you might need to scroll down a line).

 Key HKEY_LOCAL_MACHINE\SOFTWARE\Motive\M-Files\<version>\Client\MFClient\ApplicationAccess\<vault GUID> 
 Value Name  <the GUID of the application from the application definition file>
 Value Type  REG_SZ (String Value)
 Value Data  <Application checksum>

NOTE: If you want to avoid users ever seeing any pop-ups at all, you can simply replace Value Name with "allapps" and  Value Data with "any" in registry paths above. You can also optionally replace <vault GUID> with "allvaults" to apply the setting to all vaults on the server.

If you get "The vault "<vaultname>" contains applications that may run code on your computer. Do you want to allow such applications to run on this computer?"-dialog without the checksum, you will need to set the ApproveEachAppliationSeparately registry key below to get the dialog with the checksum. You can do this on a separate test vault, the checksum should be the same.

this is where you can find the application checksum

 If you wish to restore the older type of app-by-app approval request behavior in M-Files 2018, you can do so by adding this registry key:

Key  HKEY_LOCAL_MACHINE\Software\Motive\<version>\Client\MFClient 
Value Name ApproveEachApplicationSeparately
Value Type  REG_DWORD
Value Data  1 = (Default) The setting is enabled, applications are approved one-by-one
   0 = The approval to run all the vault-specific applications is requested in a single prompt

The setting can also be placed in HKEY_CURRENT_USER. If it is set to 1 in either of those places, then the app-by-app approval mode is again active. Note, however, that if the user has previously approved "all apps", that authorization is remembered even if the user afterwards changes ApproveEachApplicationSeparately to 1.

M-Files Customer Support Team,

(3 vote(s))
This article was helpful
This article was not helpful

Help Desk Software by Kayako case