Security problem with Active-X component in IE7( Internet Explorer 7 ) even trusted sites don't function

right click the security bar and install, in the ie settings advanced load defaults, in teh sp2 firewall exemptions put IE also close the browsers to refresh the changes.
Run a disc cleanup and delete the temporary internet files
How Windows XP Service Pack 2 affects web pages running locally on your computer
http://www.phdcc.com/xpsp2.htm

Merete
Can you please be a bit more specific.
Eg in  the Avanced IE settings   (Load defaults) (Restore Avanced settings?)  (Reset?) What exactly do you mean by load defaults.  in the sp2 firewall exemptions(How do I get there?)

in tools at the top the web page internet options.advanced> restore defaults.

sp2 firwall exeptions in control panel >windows firewall.Look on the top options.
Illistrated here>>
http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx

How do I enable or disable the Windows XP Internet Connection Firewall?
Click Start, Control Panel, double–click Network Connections, right-click the desired connection, Properties, Advanced tab, Under Internet Connection Firewall, uncheck or check the Protect my computer and network by limiting or preventing access to this computer from the Internet chec

From the Tools menu, select Options....
Select the Privacy icon on the top.
Select the Cookies tab to view the available options.
Check the box marked Allow sites to set cookies.
Optionally, check the box marked for the originating site only.
Select the Content icon on the top.
Check the box marked Enable Java.
Check the box marked Enable JavaScript.
Click OK. Close window.
Reload page.

This message is normal under windowsxpsp2 the previous link I provided covers this entirely.
How Windows XP Service Pack 2 affects web pages running locally on your computer
http://www.phdcc.com/xpsp2.htm

>>to help protect your secturity, internet explorer stopped this site from installing an ActiveX control on your computer. Click here for options.
If the url is added to your favourites try deleting it from there.

Finally check for spyware and clean out cookies and history temp ie files.

should say to your trusted sites try removing it.

I tried all these suggestions and still this IE7 has problems with my active X component on our intranet that IE 6 SP1 does not.

Also for   Merete
Were those instructions pertinent to  IE7 because the Content tab has no such checkboxes

Can you send me screenshots to see how get to the suggested settings you suggest for Java and Javascript

Ideally I get a diagnostic et of events that actually tell me what is going wrong!
This try this Try that really makes little sense since this is obviously security related.
What ever happened to security violation events

In all fairness I must warn you this is an odd script that launches a printing client program from a remote server by Ip Address
Note on a workstation with only IE6 SP1 all works fine. This problem is workstation specific/program specific because prior to IE7 install  IE6 Sp1 worked fine with this complex activex-x from Java application for printing images from a database.
It continues to work in the IE 6 SP1 workstations we have.
Again this appears to be an IE7 issue effecting Active X components.
One clue to a solution may involve dealing with a certificate used in this network exchange
Here is the javascript that is supposed to execute from a java applet:
<%
Response.Buffer=True
Response.Expires=0

If (VarType(Application("~WC~WebClassManager")) = 0) Then
      Application.Lock
      If (VarType(Application("~WC~WebClassManager")) = 0) Then
            Set Application("~WC~WebClassManager") = Server.CreateObject("WebClassRuntime.WebClassManager")
      End If
      Application.UnLock
End If

Application("~WC~WebClassManager").ProcessNoStateWebClass "trnWebPrintSession.twcPrintSessionMan", _
            Server, _
            Application, _
            Session, _
            Request, _
            Response
%>

after this runs an active-x or *.ocx file is run from the client workstation.
I realize this is a bit bizare. If only Microsoft actually reported what was failing so it could be directly dealt with. like process xyz failed to start due to unable to open file or  registry key - access denied
here is the key?  
Why bother to have an IE7 Event area if no events are logged upon a failure and to me not bringing up a window and not failing with a descriptive error makes things a lot harder.
IE7 is new so such things are probably going to take time to deal with, but what I got so far does not work.

Note that the following occured the 1st time the applet was run:
Warning the authenticity of this content cannot be verified. Therefore it can not be trusted
Problem listed below:
A certificate( signing or user) has expired.
Do you want to install and run OurPrintingApplication
signed on an unknown date /time and distributed by  OurExtinctVendor

While this continues to work fine on IE6SP1 workstations  the screen never appears under IE7
I suspect this is the stickypoint to using IE7 instead of IER

Any help in getting past this point would be appreciated!

Hi in response to your question it is internet explorer> tools all versions for sp2.

However this page should cover most of your questiosn regarding disabling active bar and understanding how it functions.
How Windows XP Service Pack 2 affects web pages running locally on your computer
http://www.phdcc.com/xpsp2.htm

Why do you keep refering me to pre-IE7 documentation?
Look the  settings in the browser may have changed when I installed IE7 but  what  reason should that documentation work now with IE7. I had this program running under IE6 SP1  under Windows XP SP2
just fine. What you sent me does not address this specific problem. It is something to try I suppose.
Doesn't anyone know how to trigger a real diagnostic message for this IE7 install.  This guess could still be a waste of time but I will try to follow your document and see if it actually works.

suggestions rssdds  be nice, there is so many possible causes for problems believe me I have seen them, however we are not in front of your machine so the best avenue is progressive suggestions.
If you feel I am wasting your its okay I can leave the suggestions to other EE. :)
I am not using IE7.

my application which runs fine on IE 6 does not work
using IE7 Here is what I get:
A popup window comes up from a trusted IP: I checked the settings the site was setup as a trusted site in IE7 so this active-x component should start just fine instead I get that stupid security bar
to help protect your secturity, internet explorer stopped this site from installing an ActiveX control on your computer. Click here for options.  << the page i provided shows all the necessary steps to fix this problem, but as usual and in most cases there is always more than the user provides.

Allow all cookies in whatever internet explorer browser you are using.

http://www.activewin.com/screenshots/vista/ie75299/

I am always nice Merete. I am just so frustrated with this new release of IE7 which ofcourse comes complete with almost no diagnostics or support from Microsoft.
So I am left to fend for myself as it were.

I tried everything in your document and ofcourse disabled my popup blockers, however, the active-X
component is still not working.
FIrst problem it gets stuck on http://172.18.50.112/webprinting/print.asp?CMD_C=PRINT&USERNEAME=ALEX_1&QUEUEN
where  it keeps prompting me for an install of activeX. Now I set the the active-x settings in basically install anything and still I get this prompt. Note it is not a local machine address and it fails to just install and run the active-x component like IE6 does.
The bar I get is:
--------------------------------------------------------------------------------------------------------------------
To help protect your security Internet Explorer stopped this site from installing an activeX control on your computer click here for options
---------------------------------------------------------------------------------------------------------------------

Now oddly enough this site http://172.18.50.112/* is in my trusted site list and yet it still prompts me
I set the content settings under security to allow all unsigned
I also changed the logon to use current user/password and also tried logon to intranet automatically
Nothing seems to work.
Got any more ideas??

tried opening that link and with IE6 and I get the ERROR
The requested URL could not be retrieved  connection failed.
So on my machine it does not open at all.
Did you copy this url from an IE favourites check it is spelt correctly.
If it is the only site that does work I would look at the other possibilities outside of IE7.
What is this web printing, is it a web printing site?
Have you tried accessing this site by typing in the url?

http://172.18.50.112/webprinting/print.asp?CMD_C=PRINT&USERNEAME=ALEX_1&QUEUEN
It maybe a problem with the actual URL


Have you tried uninstalling IE7 from add remove programs? You do have this option.

oh yeah my windows update popped up last night and and offered IE7, well with so many problems I figured noway.
I was tempted to install it just to find out if I have ny problems but decided I could not afford to have internet problems at thi stime lol you would be waiting for help.
It does state you can uninstall it.

Launch Internet Explorer if it is not already open.
 Click on the "Tools" menu of Internet Explorer.
 Select "Internet Options..."
 Select the "Content" tab.
 Find the "Content Advisor" box (near the top of the window) and click on  Dis-able...

enable or disable ActiveX Controls as needed through the Information Bar and the Add-on Manager.
With one click, users can instantly reset the security settings to the Medium-High default level by clicking on the Fix My Settings option in the Information Bar.
Microsoft ActiveX Opt-In—Internet Explorer 7 disables all ActiveX controls which were not used in Internet Explorer 6. When users encounter an ActiveX control for the first time, they will see a gold bar asking if they want to use the control. Users can then selectively allow or prevent running the control. Note: By default, the ActiveX Opt-in does not apply to Intranet and Trusted Site zones; new controls on those zones, along with a list of preapproved controls, also run without prompting.


You receive a security warning in Internet Explorer 7 when you visit a Web page that is hosted on a secure Web site
http://support.microsoft.com/kb/925014

Phishing Filter
http://blogs.msdn.com/ie/archive/2005/09/09/463204.aspx

To help protect your security Internet Explorer stopped this site from installing an activeX control on your computer
 click here for options<< so when you click here for options what happens, I would personally remove the site from the trusted.
Once you have established a connection and the site opens then if you wish add it to the trusted.
What security level do have as it is stating  helpto protect your security level

Of course not 172...   IP address is non-routeable like NAT 192....
It only works on our LAN the way NAT address ranges do.

Note that the URL is fine and as said before works fine from other LAN workstations running IE6SP1.  What I really need to fix this is real event log diagnostics. You would think there would be some way to log any security problems and present their potential solutions
There is one other thing I should mention:

On IE6SP1 A error window first appears as follows:
Warning The authenticity of this content could not be verified therefore can not be trusted
Problem listed below:  
A Certificate (signing or issuer)  has expired
Do you want to install or run TRNRemotePrinting signed on an unknown date/time
and distrubuted by company XYZ.

Once this is pressed in an IE6 environment all works well until the certificate expiry occurs when this prompt appears again!

Again I do not know what this is and the vendor never explained it.

No XP SP2 and all current patches have been applied. Note the application ran/runs fine whern
IE7 is is not installed but IE6 SP1 is thus far and Microsoft has been less than helpful.
 It would be refreshing I could enable debugging and start logging to the event log but those boneheads still have not put such practicle options into their software yet especially given their track record for obtuse errors like the Application Hang error(s) which incidently I do not get in windows 2000. I still prefer WIN2000 to XP

I have given you guys everything I have. Sadly no logged events show up in the event logs only disfunctional behavior as I mentioned!
Someone indicated gpedit   Group Policy Editor is the key to getting the Event Viewer to log IE7 events but thus far I see no tutorial. Can any one at least help me understand how to get more diagnostics on IE7??  I will try lame Microsoft again but I do not expect much from them!

uninstall IE7 then confirm IE6 is fully functioning and try using a test vetsion of IE7 to run alongside IE6
http://googlesystem.blogspot.com/2006/04/test-internet-explorer-7-without.html


These Release Notes give you information about installing Internet Explorer® 7 and contain information about known issues and possible workarounds for those issues.
http://msdn2.microsoft.com/en-us/ie/aa740486.aspx

Get the details on Internet Explorer 7's security improvements
http://articles.techrepublic.com.com/5100-10877_11-6128517.html

I know it was working prior to installing IE7.
I will try another thing today

Sorry I got delayed on this. I will respond by Tuesday next week

yes rssdds  please come back your feedback is valuable.

Actually I could only accept one answer and technically it was a partial answer.  
I had to install  Java Runtime Environment Version 5.0 Update 11
 via
http://www.java.com/en/download/windows_ieg.jsp?name=G

Which along with some changes mad to the security seetings of Active X components fixed the problem.
Sorry in the end I could not accept any other answer as a solution as it did not really get answered by anyone except Sun.

Hi thank you for that now I understand too.
Its a lot to read but I did mention>> If a  Java certificate expired could cause this.
Once again appreciate your feedback.
Regards Merete

Lee please note my suggestion  I feel my suggestion does answer his solution and shoudl be the accepted answer.
Comment Merete
11.05.2006 at 10:54AM EST, ID: 17875031
have a look in control panel administrative tool event viewer applications errors.
If a  Java certificate expired could cause this.
If this was a remote  printing session
Then rssdds: states>
Actually I could only accept one answer and technically it was a partial answer.  
I had to install  Java Runtime Environment Version 5.0 Update 11

Thank you Merete