You only need to change the security settings for as long as it takes to add the object. Once added, it should continue to work even if you lock down the tags.

You can verify whether your settings were saved by looking at galleryserverpro.config. One of the settings in there holds the allowed HTML tags and attributes.

I guess to make my question more clear...do these two options to allow html and java code need to be enabled to add embedded youtube code? I just tried re-enabling these settings again and still cant create the link. It doesn't appear that the tags/code are included in the default allowed tags options. In your demo video showing an object linked to youtube it seems so easy and there is no mention of having to change any settings...is this covered more in the manual or does this indicate a problem with my install?