Small annoyance for application that run from a network share.
Small GPO to resolve..;
Go to User Configuration >> Administrative Templates >> Windows Components >> Attachment
Manager
Add “*.exe” to the “Inclusion list for moderate risk file types” setting.
Phil’s Blog | IT to the core ! 
Super informative wrtiing; keep it up.
LikeLike