BlueZone Web-to-Host uses ActiveX and Java technologies to deploy, manage, and run BlueZone sessions on users workstations.
Typically, users that are members of the Administrator or Power User groups do not have any problems. However, users that are members of the Users group or use the default Windows users security template cannot run any ActiveX controls.
The minimum requirements to use BlueZone ActiveX for a standard Web-to-Host deployment are:
|
|
Ability to download ActiveX controls |
|
|
Ability to run ActiveX controls |
|
|
Write access to the Downloaded Program Files folder
|
The minimum requirements to use BlueZone ActiveX using the served desktop mode option:
|
|
Ability to download ActiveX controls |
|
|
Ability to run ActiveX controls |
|
|
Write access to the target installation directory (C:\Program Files\BlueZone is the default). You can specify a custom installation directory if you want.
|
Even though these settings are enabled in the user's browser security settings, none of these rights are available to users
who are managed using the default Windows security template. Various strategies can be employed to work around these restrictions.
Some strategies are:
Manually install the control as administrator
|
1. |
An administrator logs into the user's machine and runs BlueZone Web-to-Host. |
|
2. |
When prompted with the Internet Explorer - Security Warning, click More options.
|
|
3. |
Select the Always install software from Rocket Software, Inc. radio button. This adds the Rocket Software certificate to the Trusted Publishers certificate list in IE.
|
|
5. |
Once the control is downloaded and installed, any user of the system can run the control, as long as IE has the Run ActiveX controls and plug-in's option set to Administrator approved.
|
Automate deployment of the control
|
|
The control is wrapped in an MSI package and pushed using Active Directory or a software deployment tool like SMS. |
|
|
The update can be tied to Active Directory group policy to automatically install/update the control when the user logs in.
|
|
|
IE must have the Run ActiveX controls and plug-in's option set to Administrator approved.
|
Modify the security template
|
|
The User security template is modified to allow the minimum requirements listed above. |
|
|
Use the group policy snap in to create a new template. |
|
|
Refer to the Microsoft Internet Explorer Administration Kit (IEAK) for more information. |
Downgrade user security to "Legacy" (not recommended)
|
|
The User security template is replaced with the Legacy User template. |
|
|
This allows users to run legacy applications and give them the right to download and install software. |
Switch to the Java Web-to-Host Control Module
Considerations for Web-to-Host on terminal services and Citrix
Manually install the control as administrator
|
|
Doing this on each server makes the control available to all users of the particular server. |
|
|
These steps must be done for each server in the server pool. |
|
1. |
An administrator logs into the user's machine and runs BlueZone Web-to-Host. |
|
2. |
When prompted with the Internet Explorer - Security Warning dialog, click More Options.
|
|
3. |
Select the Always install software from "Rocket Software, Inc. radio button.
|
|
4. |
This adds the Rocket Software certificate to the Trusted Publishers certificate list in Internet Explorer. |
|
5. |
After this, any user of the system can run the control, as long as Internet Explorer has the Run ActiveX controls and plug-ins option set to Administrator Approved.
|
Set the actual version of the control in the web page
|
|
This disables the feature that automatically finds the latest version of the control. |
|
|
This functionality is disabled for standard users on terminal services and Citrix. |
|
|
In the Web-to-Host Wizard, or in the launch_x.htm web page, set the BlueZone ActiveX control version to the actual version, rather than the default value of -1,-1,-1,-1.
|
|
|
The actual version of the control can be obtained by launching Internet Explorer and going to . Click Settings (the first one) and click View Objects.
|
|
|
Right-click on BlueZone Web-to-Host control module v5, go to properties and view the Versions tab.
|
|
|
The actual version looks similar to this: 5.1.0.1203. Replace the -1,-1,-1,-1 entry in the Wizard or the web pages with the
actual version formatted like this: 5,1,0,1203.
|
Note
This is just an example. Your actual version can be different.
Useful Microsoft links on ActiveX security
|
|
How to Install ActiveX Controls in Internet Explorer using Active Directory:
|
|
|
Further notes on the above link for Windows XP and Windows 2003:
|
|
|
Managing ActiveX Controls:
|
|
|
Internet Explorer Administration Kit:
|
|
|
Internet Explorer Corporate Deployment Guide:
|