Terminal Server ActiveX Issue

[astaylor]

I hope i am able to explain this thoroughly.

Our users log into a Server 2003 w/ Terminal Services to run our main agency application. They need to be able use a certain website that integrates with the software but uses an ActiveX component. If i login as a regular user and open up the website i dont get prompted to install the ActiveX component. If i login as myself (domain admin) i get prompted to install with no problem. So, i would assume a permissions issue.

Here is what i have tried already.

Put the user in an OU that has no Group Policies applied. (Checked with gpresult)
-no change

Added the user as a local machine administrator on the terminal server
-no change (very strange this did not work)

Set the internet explorer security level to low
-no change

If i do a "run as" on IE and put in my information while logged in as the user it works perfectly with no problem.

Please help.

thanks,

-drew

MCSA 2003: Messaging

 

[theglaz]

I know this sounds a little basic, but have you tried logging in as a domain admin and installing/updating/enabling the ActiveX control while in install mode? When you're done, return to execute mode, then log off the administrative session. Subsequently, have your user log off and then on again to see if the ActiveX control is enabled for them.

Remember, when you remove someone from an OU affected by a Group Policy, many of the settings will still persist for that user from the previous application of that GP. It's not a "switch on/switch off" deal. I learned this the hard way. You will probably still need to manually, (or via script), change/remove some of those settings.

 

[astaylor]

I knew i forgot to mention something. I did try to install the activeX control while in Install Mode then going back to Execute but it did not work for the user.

Can you explain further on your last recommendation. I run a gpresult and dont show any group policies being applied to the user. Our current GPO for users is really locked down (no run, cmd, HD access, etc.) and once i took the user out of that OU i am able to use all of those functions after logging out and logging back in. How can i tell in detail if there are still policies being applied? and remember i added the user as a local machine admin to the server as well with no luck. I also checked the event viewer and there is nothing of use in there.

The problem is still when the use opens up that particular website nothing ever pops up about installing the activeX control. They dont get an error or anything. The page just sits there starring back at them.

thanks,

-drew

MCSA 2003: Messaging

 

[theglaz]

Interesting. You would not see anything in terms of the GP being applied anymore, because it isn't, (for that user.)

I'm not sure I have the answer, but here are a few things I would check.

Have you tried with a new test user that has never been in an OU and therefore never had the lock-down GP applied?

Does it happen with all ActiveX controls or only the one you are trying to use? Have you checked the user's browser security settings for ActiveX?

Is your server a domain controller?

I'm assuming that you are using IE. Maybe the user has their popup blocker turned on? Sounds silly, but I've seen things like this...