Your current security settings do not allow this file to be downlo

G

Guest

I am piloting a Windows Server 2003 Terminal server. On Friday TS users began
complaining that when they tried opening Adobe PDFs on our corporate intranet.

Also, when they tried opening certain web sites, they received an "invalid
synatx error" window - page cannot be displayed.

There is no GPO set for these users. I even tried elevating one of the users
to a local administrator, and that didn't help. I verified the IE settings
allow downloads in all zones.
 
F

Frank Saunders, MS-MVP OE

Dan said:
I also noticed that the users' IE window doesn't show what zone
they're in (Internet, intranet, trusted, etc.). I'm guessing that has
a lot to do with the problem.

This sentence needs something added to it:

"On Friday TS users began complaining that when they tried opening Adobe
PDFs on our corporate intranet."

--
Frank Saunders, MS-MVP OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/
 
R

Robert Aldwinckle

Dan said:
I also noticed that the users' IE window doesn't show what zone they're in
(Internet, intranet, trusted, etc.). I'm guessing that has a lot to do with
the problem.

Or it could mean that the Status bar is turned off. (Alt-V,B)



Example details?


---
 
G

Guest

Status bar isn't turned off. It just doesn't show what zone you're in.
However if you click the lower right hand corner you get the Security tab of
the Internet Options dialog box.

Basically any url that would be considered a download gets the Security
Alert. Also, some urls simply won't display - Invalid syntax. Examples
include www.google.com; www.yahoo.com and others.
 
R

Robert Aldwinckle

....
I'm unclear on the operation of IE with TS. Is IE on the client
or on the server?

If the former and depending on the client I would try an IE Repair (ref KB194177)
If XP you can try a very much smaller subset of all the re-registrations
that causes by using the list of regsvr32 commands given in KB831429
(notice that msjava.dll is not normally installed; so don't worry if that one fails.)

BTW XPsp2 has a /rereg switch on the iexplore.exe command line.
However, there appear to be errors in ieuinit.inf which make it not very
useful as is. I have documented some modifications to that .inf file
elsewhere if you need to try that more appropriate list instead

Status bar isn't turned off. It just doesn't show what zone you're in.

If that means you aren't seeing the icon either I would try changing
the size of the Caption Buttons setting (via Display Properties,
Appearance tab, Advanced Appearance dialog,Item...)
Keystrokes: Win-D,Menu,r,Ctrl-Backtab x2,Alt-d,Alt-I,C...

Alternatively I would use RegMon to compare whether there are
any significant differences between two systems with regard to this
item. E.g. I just found some entries which may be applicable
simply by filtering on iexplore*ico (There are some security related
keys which match that pattern. They show that the icons could
come from shdocvw.dll.)

However if you click the lower right hand corner you get the Security tab of
the Internet Options dialog box.

And the icons are there? But they're bigger? It looks as if they might
be the same registry accesses, so that's why I'm thinking that a bigger
status bar might make it more likely to be displayable there.

RegMon matches a lot of stuff even with that relatively restrictive filter
I suggested so you may have to play with it a bit, e.g. changing the
zone of the site and noticing the changes Unfortunately no access
is monitored when I just toggle the Status bar off and on. I guess
that one must be optimized somehow.

Basically any url that would be considered a download gets the Security
Alert. Also, some urls simply won't display - Invalid syntax. Examples
include www.google.com; www.yahoo.com and others.


I'd be hopeful that the the invalid syntax problem would go away after
an IE Repair. If not, use RegMon to try to detect (e.g. using the
http prefix) what is being generated that is wrong. Who knows,
the Repair may also affect both symptoms.


Good luck

Robert
---
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top