update ActiveX in IE without admin rights
Hi All,
I have an issue where I need to give 100 users a webpage with an ActiveX component. I tried to Thinapp the web link with the ActiveX installed, using the native web browser . The problem is, the company providing the web page performs random webpage updates that require the ActiveX component to be reinstalled on the client computers. This then would generate either 100 users calling the help desk, or providing 100 users with admin rights. Neither are a good situation.
I am not able to provide the website link here, as it is a paid for link to some sections within our organisation.
The best I have found so far has been a reg entry not captured in the Thinapp capture, - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{GUID}\iexplore\AllowedDomains\{domain}.com
This was Thinapp'd as a Merged capture.
Even adding the above key as full isolation, it is still asking for admin rights.
Has anybody thinapp'd a webpage with activex components using the local/native browser?
I hope this all makes sense to those who might know.
Thanks in advance
0 Comments
[ + ] Show comments
Answers (2)
Please log in to answer
Posted by:
Pressanykey
9 years ago
Hi,
have you considered ThinApp'ing a complete browser instance (including ActiveX components) and using ThinDirect for the website in question?
This way you can ensure that the virtual browser is only used for the Website in question, and if the website in question updates the ActiveX component, the changes made are kept in the Sandbox...
If you go down the "classic" route with a native ActiveX component, is the component signed by the vendor? If so you could add it (the certificate) to the trusted publishers store, and allow ActiveX's from this publisher... you can google this...
Another possibility, is if you get a heads-up from the vendor that a new version of the ActiveX component is in the pipeline, just create a classic deployment package.
Cheers
Phil
have you considered ThinApp'ing a complete browser instance (including ActiveX components) and using ThinDirect for the website in question?
This way you can ensure that the virtual browser is only used for the Website in question, and if the website in question updates the ActiveX component, the changes made are kept in the Sandbox...
If you go down the "classic" route with a native ActiveX component, is the component signed by the vendor? If so you could add it (the certificate) to the trusted publishers store, and allow ActiveX's from this publisher... you can google this...
Another possibility, is if you get a heads-up from the vendor that a new version of the ActiveX component is in the pipeline, just create a classic deployment package.
Cheers
Phil
Comments:
Posted by:
Tempril
9 years ago
The ActiveX component I was trying to have update was installing into C:\Windows\Downloaded Program Files. The users hard drive is not writeable except for one directory, that is set up for people to save data they don't want backing up. Even the user profile is backed up to redirected network paths.
I created the Thinapp as a write-copy package and now we just have to wait for the server to be updated, at some stage when the vendor decides to modify something.
It might be closed, not sure until then. Thanks Phil, you gave me some ideas when I started to follow your suggestions.
I have tried to Thinapp IE11 but I keep getting a unable to load dll c:\programs files\internet explorer\iexplore.exe-> api-ms-win-downlevel-advapi32-l1-1-0.dll
The specified module could not be found.
There are no decent IE11 recipes I can find. Only one that basically says install prerequisites, start capture, install, close capture. Doesn't work!1
Comments:
-
Hi,
Ie are fairly hard to capture. Did you follow the instructions on the ThinApp blog site?
(http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2069870)
Also, regarding SXS issues, I tend to remove all of the SXS entries from the registry, and move / copy the files to the corresponding system directory.
I have a couple of IE 11's as ThinApp, but they contain specific Java versions and Flash / Shockwave - Pressanykey 9 years ago-
Thanks for your help Pressanykey.
I had seen that link before, and so had to roll my capture machine (Win7 x64 SP1) back to IE8 to capture IE11.
I have to move on from this today and get on/finish with other work, as I won't be in for the next two weeks from Tuesday.
When I get back I will have another look at Thinapp of IE11.
I found the SxS stuff in the reg and took that out, but still didn't work. Maybe I haven't got the right kernel(x).dll files copied to the right places in the thinapp.
do you have any reading I can do on IE thinapp? - maybe I haven't read yet.
Thanks - Tempril 9 years ago