[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

Some Websites do not function correctly on IE8 as non-Administrator

Posted on 2011-10-09
10
Medium Priority
?
419 Views
Last Modified: 2013-12-08
Hi All,

We are experiencing an issue on Internet Explorer 8 where some websites are not functioning correctly as non-Administrator accounts.

Issue Envionment:
=================
- Client Machines are Windows 7 SP1
- Internet Explorer Zones as below:
      - Internet = Medium-High + Protected Mode ON
      - Local Intranet = Medium Low + Protected Mode OFF
      - Trusted Sites = Low + Protect Mode OFF
      - Restricted Sites = High + Protected Mode ON
- Internet Explorer Privacy Settings as below:
      - Override Auto Cookie Handling = True
      - First Party Cookies = Accept
      - Third Party Cookies = Accept
      - Always allow session cookies = True
- Pop-up Blocker = Enabled with Various Allowances (including affected sites)
- Domain Users are *not* Local Administrators or Power Users - they are just Users
- We use group policy to set NTFS permissions on their local machine as below:
      - %SYSTEMDRIVE%\* - Read Only
      - %SYSTEMDRIVE%\Users\%USERNAME%\* - Full Control
      - %SYSTEMDRIVE%\Users\Public\Desktop\* - Full Control

What is happening:
==================
Some sites do not function correctly.
For example a website report will not generate under non-Administrator but will under Administrator.

Example Websites:
 - http://www.cordellconnect.com.au/
      - There is a print function on the website that generates a PDF report that will not work for non-Administrators
      - When a non-Administrator triggers this function the website returns them to the login screen.
 - https://mypms.bookingcenter.com/
      - There is a reporting function on the website that generates a HTML report that will not work for non-Administrators

I know this will make troubleshooting very hard - but both sites above require login information that I cannot divulge.
I have a feeling that both sites have issues relating to cookies - but I am stumped as to why this is happening.

What I Have Tried:
==================
- I have run Process Monitor to see if there is anything along the lines of Access Denied but nothing like that appears during the replication of the problem.
- The workaround I have in place is to grant users Local-Administrator access to their machine (I know I know).
0
Comment
Question by:auscoit
  • 5
  • 2
  • 2
  • +1
10 Comments
 
LVL 30

Expert Comment

by:ded9
ID: 36940582
Try lowering down UAC setting from control panel and then check.



Ded9
0
 

Author Comment

by:auscoit
ID: 36940584
Hi ded9 - UAC is disabled on all machines.. forgot to add that.
0
 
LVL 30

Expert Comment

by:ded9
ID: 36940601
Uninstall your security software...reboot and then check.


Ded9
0
Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

 
LVL 84

Expert Comment

by:Dave Baldwin
ID: 36940734
That main page for https://mypms.bookingcenter.com/ is poorly formatted HTML page.  I'm wondering if they have ActiveX code on their that requires Admin privileges to run.
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 36943543
"I have run Process Monitor to see if there is anything along the lines of Access Denied". Are you capturing any other write attempts out of their User Profile?

Did you set the filter to ONLY include "Result=Access Denied" so as not to omit any processes? Or at least search with the results?

They are read only on the ENTIRE drive?

Does this "Print" function use a locally installed printer? Maybe it cannot create the .spl files?

0
 

Author Comment

by:auscoit
ID: 36945744
Hi John,

Apologies - they do have FC of the print spooler folder as well as permission to change the status of the print spooler service.

My monitoring attempts with procmon were as below:

Result != Success
Process=iexplore.exe

I will re-run with Result=Access Denied and no other filtering and will see what I can find.
Watch this space...
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 36946443
Watching.....

FYI, SUCCESS is normally the first thing I exclude, when troubleshooting issues, as it SIGNIFICANTLY reduces the amount of data to dig through....
0
 

Accepted Solution

by:
auscoit earned 0 total points
ID: 36954107
After much research and banging my head against the wall I came across the following information:
http://stackoverflow.com/questions/1324181/ie8-losing-session-cookies-in-popup-windows
http://blogs.msdn.com/b/askie/archive/2009/03/09/opening-a-new-tab-may-launch-a-new-process-with-internet-explorer-8-0.aspx

The issue is that whenever the reports .etc generate the browser was opening a new window and the cookies were not carrying over to the new window!

This is all due to the fact that IE8 creates separate processes between windows.
I cannot explain why it was working for local administrators - but basically the issue is resolved by the following key:

Windows Registry Editor Version 5.00

[HKEY_USERS\S-1-5-21-1170163745-1901472128-176895030-10308\Software\Microsoft\Internet Explorer\Main]
"TabProcGrowth"=dword:00000000

Open in new window

0
 

Author Comment

by:auscoit
ID: 36954113
Note - It also works for

HKLM\Software\Microsoft\Internet Explorer\Main
"TabProcGrowth"=dword:00000000
0
 

Author Closing Comment

by:auscoit
ID: 36975530
Self-solved.
0

Featured Post

Take Control of Web Hosting For Your Clients

As a web developer or IT admin, successfully managing multiple client accounts can be challenging. In this webinar we will look at the tools provided by Media Temple and Plesk to make managing your clients’ hosting easier.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When I'm searching for answers on Experts Exchange, I often use Google because it's built into my browser.  To search only on Experts Exchange, I use the "site:" search operator, which can be cumbersome to type out each time I want to run a search.…
When you put your credit card number into a website for an online transaction, surely you know to look for signs of a secure website such as the padlock icon in the web browser or the green address bar.  This is one way to protect yourself from oth…
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…
Suggested Courses
Course of the Month10 days, 11 hours left to enroll

612 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question