Cannot View ActiveX Controls or Appltes on a Terminal server

[PrajithK]

Hello,

We have 2 Windows 2003 Server Installed in our company. The AD Users cannot
view the Active Controls/Appltes on the Internet explorer when they browse
through Terminal server. The y can see the Red X mark on the browser. I have
installed the JVM and Adobe Flash Player. Also the the Enhanced Internet
Security is disabled. If i am logging in as Administrator Username i can see
the Applets/ActiveX without any problems. Any one have idea of this? Is there
any other settings in the Browser setup? Please advise.

Thanks a lot in Advance,
Prajith

[Vera Noest [MVP]]

Merely disabling IEES doesn't change the settings for already
existing user accounts and the Default User account.
The best way to configure IE settings is through a Group Policy.

908784 - New users are still limited by the Internet Explorer
Enhanced Security Configuration component in Windows Server 2003
after this component is removed
http://support.microsoft.com/?kbid=908784

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?UHJhaml0aEs=?= <Praj...@discussions.microsoft.com>
wrote on 17 aug 2008 in
microsoft.public.windows.terminal_services:

[PrajithK]

Vera Noest,

Thanks a lot for your reply. I have used the adm files and removed iees from
the server but no luck. i tried to reduce security settings of Internet
explorer to LOW. But the settings become again to Medium when i reopen the
Internect explorer. I think it is security issue? As an Administrator there
is no issue. i can view all the sites without any issues. When i open sone
site it asking to install Adobe Flash Player ActiveX need to be installed. If
i click the Install ActiveX it does nothing and shows a red X mark.

I am really tired with this setup.

Any help is highly appreciated.

Thanks,
prajith

[Vera Noest [MVP]]

You have to unlock the user accounts with a Group Policy, using the
iees adm templates, there is no other way.
Maybe you haven't applied your GPO correctly? To which OU did you
link it? Have you used gpresult to see if your GPO is applied to
the users when they log on to the TS?

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?UHJhaml0aEs=?= <Praj...@discussions.microsoft.com>
wrote on 20 aug 2008 in
microsoft.public.windows.terminal_services:

[PrajithK]

Vera,

I did apply the InetESC.adm file in the Group policy of the Terminal
server(GPEdit). Forgive me if i am wrong. I couldnt find any user unlock
option using the adm files- sorry for the unawareness.

Should i do this on AD domain?

please advise.

Thanks a lot for your interest.

[Vera Noest [MVP]]

I didn't mean that there is an "unlock" option, i meant that you
have to modify the settings in the GPO to undo whatever IEES did.

I can't tell you in which GPO you have to make the changes, that's
why I advised to use gpresult. But if you are editing the local
policy and it has no effect, chances are that a domain-wide policy
has different settings.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net

*----------- Please reply in newsgroup -------------*

=?Utf-8?B?UHJhaml0aEs=?= <Praj...@discussions.microsoft.com>