[OPLINTECH] Windows Steady State issues

[Jim Lack]

This appears to be a group policy setting issue.  I'm experimenting with
a test computer that doesn't have SS on it yet.  When I log in as the
user, I get the "Add-on Disabled" notice.  But if I disable the GP, I do
not get the notice and I can go to the website without any problems.  I
need to find out what setting in GP controls the Add-on feature to IE.
I'm still gonna have an issue with Firefox as well.  If anyone knows
what GP setting this is, can they send the info my way?  If not, I might
have to go thru the settings one at a time until I stumble across it.

 

Jim

 

________________________________

From: Dan Will [mailto:willda at oplin.org] 
Sent: Friday, September 05, 2008 12:04 PM
To: Jim Lack
Subject: RE: [OPLINTECH] Windows Steady State issues

 

Jim, 

 It's as much a problem with XP as it is with SS. The "user" profile
does not have the rights to install add-ons. You need to give the user
profile admin permissions, remove the check that stops changes to the
registry and IE's registry. Tell SS to save changes. Then log on as that
user and go to the site in question. Install the add-on and run it close
IE. Log off from the profile, log on as admin, tell SS to remove changes
and log off. You "should get a box prompting you to save changes and
restart. Do just that. Once you restart, log on as the patron to make
sure the add-on works. Then log on as admin, remove the admin rights for
the patron. Reset the checks in SS and log of then restart again. 

  I know that this is going the log way around the horn to get things
done, but that's the only way I have found to make it work. I try to
make sure that everything works in all of the profiles before I lock SS
down but, I always seem to miss something or something new comes along.
Once things are working correctly, updates can be made to the programs
with no problems from the admin profile and transfer over to the user
profiles. It's the new ones that cause us to pull out our hair. :^)

 

Dan Will

Technology Supervisor

Meigs County District Public Library

willda at oplin.org

740.992.5813

740.992.6140 (fax)

 

 

The difference between fiction and reality?

Fiction has to make sense.

Tom Clancy

 

 

 

From: oplintech-bounces at oplin.org [mailto:oplintech-bounces at oplin.org]
On Behalf Of Jim Lack
Sent: Thursday, September 04, 2008 4:48 PM
To: oplintech at oplin.org
Subject: [OPLINTECH] Windows Steady State issues

 

I've just implemented Windows Steady State 2.5 on some of our public
computers.  The computers are running Windows XP, service pack 3.  I am
having problems with a number of web sites that want to load add-ons to
IE7.  In the children's department, the Webkinz web site is a good
example.  When a patron tries to log into this site, an add-on Disabled
windows pops up in the lower portion of the screen.  It states, "This
webpage is requesting an add-on that is disabled.  To enable the add-on,
click here.  Now if I log into this computer as an admin, it goes to the
site no problem and does not prompt for the add-on.  The add-on it is
prompting for is a flash player that is already loaded.  I get a similar
message when trying to get to this site thru Firefox.  It tries to let
the user load the add-on but then says the load failed.  This is just
one web site.  Others are Cartoon Network, You Tube, GamePost,
Yahooligans and Miniclip.  We are using Group policy and the Steady
State GP add-in to manage the user and computer.  The user is a part of
the "authenticated users" group on the C drive.  I've added the user to
the local admin group but this has no affect.  What am I missing or is
there a way to tweak the permissions to allow them to download stuff
without giving away too much security?

 

 

Jim Lack

Rocky River Public Library

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.oplin.org/pipermail/oplintech/attachments/20080908/51ec0288/attachment.html