Thanks for the reply.

Yes, the registry value is correct.

The application kicks off a warning in the production environment in 2
situations. One is the application calling the mapi dll to send a
message. The other is using outlook forms to send an email (one off
form I think). In the security template both these events are set to
prompt user however this doesn't occur.