Re: Removing Software Restriction on remote executable
- From: "Vera Noest [MVP]" <vera.noest@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 10 May 2007 12:45:37 -0700
Dave <dogrady@xxxxxxxxxxx> wrote on 10 maj 2007 in
microsoft.public.windows.terminal_services:
On May 9, 5:11 pm, "Vera Noest [MVP]" <vera.no...@remove-
this.hem.utfors.se> wrote:
Do the normal users get any message when they try to start the
application?
I doubt that it is a software restriction policy, because that
would apply to both the old and the new server equally
(assuming they are in the same OU).
Maybe it's the IE Security?
Fromhttp://ts.veranoest.net/ts_faq.htm
Q. When users run a program from a file server, they see a
"file download" warning box
A. Internet Explorer Enhanced Security (IEES) restricts access
to scripts, executable files, and other potentially unsafe
files on a UNC path unless the UNC path is added to the Local
Intranet zone explicitly. For example, if you want to access
\\server\share \setup.exe, you must add \\server to the Local
intranet zone.
Start Internet Explorer on the Terminal Server, go to Tools -
Internet Options - Security - Local Intranet zone. Add the UNC
name of the server where the application is located, something
like \\server.
Or configure this in a GPO:
User Configuration - Windows Settings - Internet Explorer
Maintenance - Security zones and Content ratings
"Local intranet"
For more details, check this article:
815141 - Internet Explorer Enhanced Security Configuration
Changes the Browsing
Experiencehttp://support.microsoft.com/?kbid=815141
_________________________________________________________ Vera
Noest MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___
Dave <dogr...@xxxxxxxxxxx> wrote on 09 maj 2007 in
microsoft.public.windows.terminal_services:
Howdy
In the process of replacing a 2003 terminal server (hardware
replacement). The existing server has a program
that runs via a remote executable (on a mapped share) - works
fine.
The new server will run launch the app if logged-in with
Admin rights,but normal users cannot launch the app.
I'm guessing it's a software restriciton blocking remote
executables - but that's a guess. Is there someway to allow a
specific remote executable to launch?
Any clues would be appreciated
Thanks in advance
Dave
Bang-on. Added the UNC path to the Local Intranet site and it
opened right up.
I know I have not set this on the old server, so I'm at a bit of
a loss as to the differences, but now it's working and that's
the main thing.
Thanks very much
When you installed TS, you received a question about tuning IEES
for normal users. Maybe you answered that question differently on
this server?
Anyway, I'm glad that the problem is solved, and thanks for
reporting the results back here!
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___
.
- References:
- Removing Software Restriction on remote executable
- From: Dave
- Re: Removing Software Restriction on remote executable
- From: Vera Noest [MVP]
- Re: Removing Software Restriction on remote executable
- From: Dave
- Removing Software Restriction on remote executable
- Prev by Date: Re: Editing GP
- Next by Date: Re: Terminal services session closes
- Previous by thread: Re: Removing Software Restriction on remote executable
- Next by thread: MS TS "Hosting" issues for non-employees
- Index(es):
Relevant Pages
|
