Get Internet Explorer security settings from end user - security

There are reported problems with our web application which only seem to be happening at one client's site. For diagnostic purposes, is there any way you can get a client to send you their IE Security custom settings ? e.g. In IE 8, Tools -> Internet Options -> Security Tab, for the "Internet" zone, you can click "Custom Level" to see the custom security settings. Is there some way the user can export their settings to a text file or something ? Or are screen dumps the only way ?
EDIT : sorry, should have mentioned it is for Windows XP (SP3)

gpedit.msc -> Local Computer Policy -> Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer
Right click, Export List...

If your user is using Windows 7, you might want to try the "record steps to reproduce a problem" built into windows 7 (possibly vista too, I'm not sure). It takes screenshots and gives you some basic statistics.
Just have them type in "record steps to reproduce a problem" in the "search for programs and files" text box under the windows 7 equivalent of the start button.

Related

How do I set up IIS to debug classic ASP?

How do I set up IIS to debug classic ASP?
Help Needed Setting up Classic ASP Debugging
According to what I have seen on social media, in order for me to set up my computer for writing and debugging Classic ASP, I need to set up IIS a certain way -- which I did -- and then I have to enable ASP by doing the following:
IIS7 - IIS > ASP > Compilation > Debugging Properties > Enable Server-side Debugging
And I am stuck on this. Please, someone give me an idea of what I need to click on.
The steps to implement your requirements can be found easily from internet. The reason why you can't see "ASP" module in your screenshot is you didn't enable "ASP" feature. Please refer to the steps below:
1. Open your "Control Panel" --> "Programs" --> "Turn Windows feature on or off".
2. Then you can find "ASP" option under "Internet Information Services" --> "World Wide Web Services" --> "Application Development Features" like below screenshot.
3. Just enable "ASP" and then go to your IIS manager, choose the site which you want to edit under "Sites". Then you can find "ASP" module.
Hury Shen posted a very good answer. I might be ready now to have a go at making my first "Hello World" classic ASP program.
The answer provides content that even the online Microsoft Documentation I have read has left off. Namely, it is checking the ASP box.
I clicked on the help button and this lead me to a browser page which explained how to create an ASP page.
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831768(v=ws.11)?redirectedfrom=MSDN
This link offers this help:
and this takes me to a new page
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831387(v=ws.11)
I have accomplished the prerequisite and step 1 on the list. So I go to step 2
Step 2: Add a Classic ASP Website You can perform this procedure by
using the user interface (UI), by running Appcmd.exe commands in a
command-line window, by editing configuration files directly, or by
writing WMI scripts. To add a website by using the UI Open IIS
Manager. For Windows Server 2012, on the Start page click the Server
Manager tile, and then click OK. On the Server Manager Dashboard,
click the Tools menu, and then click Internet Information Services
(IIS) Manager. For Windows 8, on the Start page type Control Panel,
and then click the Control Panel icon in the search results. On the
Control Panel screen, click System and Security, click Administrative
Tools, and then click Internet Information Services (IIS) Manager. In
the Connections pane, right-click the Sites node in the tree, and then
click Add Website. In the Add Website dialog box, type a friendly name
for your website in the Site name box. If you want to select a
different application pool than the one listed in the Application Pool
box, click Select. In the Select Application Pool dialog box, select
an application pool from the Application Pool list and then click OK.
In the Physical path box, type the physical path of the Web site's
folder, or click the browse button (...) to navigate the file system
to find the folder. If the physical path that you entered in step 5 is
to a remote share, click Connect as to specify credentials that have
permission to access the path. If you do not use specific credentials,
select the Application user (pass-through authentication) option in
the Connect As dialog box. Select the protocol for the Web site from
the Type list. The default value in the IP address box is All
Unassigned. If you must specify a static IP address for the Web site,
type the IP address in the IP address box. Type a port number in the
Port text box. Optionally, type a host header name for the Web site in
the Host Header box. If you do not have to make any changes to the
site, and you want the Web site to be immediately available, select
the Start Web site immediately check box. Click OK.
It has been a long time since I have done anything like this. Basically, I assume I am turning my desktop computer into a web server. Am I right? If this is so, do I have to follow through with all the overhead and steps in buying a namespace? I hope not.
I have questions about step 4 : "If you want to select a different application pool than the one listed in the Application Pool box, click Select. In the Select Application Pool dialog box, select an application pool from the Application Pool list and then click OK." As I type out the site name, the field for "Application pool" repeats what I type for the site name. Since I am not creating a new application pool -- or I do not want to -- I click on select and choose the DefaultAppPool .
Since I am only wanting to write test code locally, I connect as an application user.
I did not put in an IP address.
It complained that I was using port 80. So I switched it to port 79 and clicked ok.
So now I think I have an asp website. What do you think?

Is it possible to create a custom Windows 10 Settings pane?

I know it's possible to create and register an executable or .dll as an additional Windows Control Panel via the registry but would like to integrate with the Windows 10 Settings application, for instance as an additional entry in the 'Network and Internet' Settings pane. I've found a reference to OEM Partner Settings but am neither an OEM, nor a Partner, and just want to add Control-Panel like functionality in an obvious place. I can't find any more developer documentation on SO or MSDN that relates to this so wonder if it's possible or whether MS have locked the Settings application a little tighter than the old (and maybe to be deprecated?) Control Panel? What's best practice for Windows 10 system-wide settings applications/applets/panels?

Your organization's policies are preventing us from completing this action - Microsoft Office [closed]

Closed. This question needs details or clarity. It is not currently accepting answers.
Want to improve this question? Add details and clarify the problem by editing this post.
Closed 2 years ago.
Improve this question
When I try to open hyperlinks in a Microsoft Office program like Excel or Outlook the following message is shown:
Your organization's policies are preventing us from completing this action for you. For more info, please contact your help desk.
How can I resolve this so it opens Hyperlinks with my default browser?
The "official fix" does not support Windows 10. The solution below works for Windows 10:
Create a new text file with the content below and save it:
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\.html]
#="htmlfile"
"Content Type"="text/html"
"PerceivedType"="text"
[HKEY_CLASSES_ROOT\.htm]
#="htmlfile"
"Content Type"="text/html"
"PerceivedType"="text"
[HKEY_CLASSES_ROOT\.shtm]
#="htmlfile"
"Content Type"="text/html"
"PerceivedType"="text"
[HKEY_CLASSES_ROOT\.shtml]
#="htmlfile"
"Content Type"="text/html"
"PerceivedType"="text"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\htmlfile\shell\open\command]
#="\"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE\" -nohome"\
Change the extension from .txt to .reg (you might need to show extensions; see simple tutorial here).
Execute the file (double-click it).
That's it! Problem solved!
(Source here)
Method 3 - Step 3 from Microsoft support page Hyperlinks are not working in Outlook:
Verify that the String (Default) value of the "HKEY_CLASSES_ROOT .html" key is "htmlfile"
Select Start > Run.
In the Open box, type regedit, and then select OK.
Locate, and then click the following registry subkey:HKEY_CLASSES_ROOT .html
Make sure that the value of the String (Default) is "htmlfile". If it's not "htmlfile", right-click (Default), select Modify, input htmlfile in the Value data box, and then select OK.
Exit Registry Editor.
In my case .html default value was incorrectly set to to FirefoxHTML.
I modified the *.reg file to use Chrome (also had to set Chrome as the default browser in Win 10 Settings -> Apps -> Default apps -> Web browser), then the hyperlinks in Excel worked. (Note: I had also removed IE11 from Win 10, and did not have to re-install it):
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\.html]
#="htmlfile"
"Content Type"="text/html"
"PerceivedType"="text"
[HKEY_CLASSES_ROOT\.htm]
#="htmlfile"
"Content Type"="text/html"
"PerceivedType"="text"
[HKEY_CLASSES_ROOT\.shtm]
#="htmlfile"
"Content Type"="text/html"
"PerceivedType"="text"
[HKEY_CLASSES_ROOT\.shtml]
#="htmlfile"
"Content Type"="text/html"
"PerceivedType"="text"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\htmlfile\shell\open\command]
#="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" -nohome"\
With some search about organization's policies i found the answer in this link.
It worked for me. I've downloaded the fix-it for Windows 8.1 and Windows 8 and after run and reboot the hyperlinks work now.
The official microsoft way did not work for me. I had to do the following:
- Go to Control Panel -> Programs
- Click "Set your default programs"
- (you should now be at "Control Panel\Programs\Default Programs\Set Default Programs")
- Select on the browser of your choice (I went for chrome) and
- Click "Set this program as default"
(Also shown in this video)
I have just discovered exactly what works for me with the same problem but in Outlook 2013. I have a different key (lets say it's called webpage) under HKCU that has my default browser shell associations. The .html key points to it: (default) = webpage.
Firefox is the default browser under keys HKCU\webpage\shell\firefox but Outlook gives me the error Your organization's policies are preventing us from completing this action for you. For more info, please contact your help desk. even though Firefox works as my default browser in every other app (that I have used it in, probably haven't tried Excel).
When I add keys HKCU\webpage\shell\open\command without any (default) values or any other values and restart Outlook, my links work as expected. Seems as though Outlook is, for some reason, checking that these keys exist, even though it doesn't actually use them, as my link opens in Firefox still.
UPDATE: Windows 10.1709 appears to now not only require the open shell command but also USE it, even though it's not listed as the default, so you now need to have the command's (default) value populated. I see this same behaviour with Thunderbird and just pasting a URL into the start run dialog as well.
Re-setting Outlook and Firefox (or your browser of choice) as default Mail app and Web browser in Control Panel > Default Programs solved it for me.
If you have Notepad++ make sure you have not associated the .htm and .html file types with Notepad++!!
Fix: Notepad++ > Settings > Preferences > File Association > remove
.htm and .html from the far right side Registered extensions >
restart Outlook/your MS Office application.
All proposed solutions didn’t work for me, but the following worked.
While MS wants you to believe your organization is the culprit, it may not be like that...
I noticed that, at the very same time this problem started in Outlook, IE got disabled.
MS silently disabled IE during an recent update, because there is Edge.
The very logic result of disabling IE is that Outlook no longer can open hyperlinks in your favorite default browser, even though that isn't IE. And note, it even can't open it in Edge, when IE is disabled. And this is where Microsoft messed up.
So we need to enable IE, even though we never use it. Go to "Control Panel" -> "Program and Features" -> "Turn Windows features on or off", and check the checkbox next to "Internet Explorer 11".
Hope this helps, I could not find this solution anywhere, even not on the MS site.
To make this work for me I had to completely delete the registry keys first, then paste in the *.reg file fix from above. I think I had some real garbage in there.
What worked for me was to close Outlook and Word (etc.), open IE, go to SETTINGS, go to advanced, click RESET, click yes at the confirmation and let it reset all settings. I then re-opened Word and could follow links.
Since this is a relatively easy fix, and also listed on the MS site as an official method of fixing, I'd recommend starting with this one. Ref. https://support.microsoft.com/en-ca/help/310049/hyperlinks-are-not-working-in-outlook

Installed IIS but get blank page and it doesn't show up in Windows services list

I am trying to install IIS on my Windows 8.1 laptop and followed the directions at Microsoft for installing IIS. But when I type localhost, instead of getting the IIS start page, I get a blank page.
When I do Windows + R and type services.msc, the resulting list of services is long but does not include Internet Information Services.
When I look at the Windows filesystem, I do find the inetpub folder with four subfolders, including wwwroot. In the wwwroot folder is the iisstart.htm file that is supposed to display when I type localhost into my browser.
I have read that one possible problem is that both Skype and IIS want to use Port 80 and there is a conflict. So I decided to try to change the default port for IIS, but I found that I don't appear to have the IIS Manager on my system. When I go to Administrative Tools, Internet Information Services Manager is not on the list of administrative tools.
I added both the HTTP Redirection module as well as the IIS Management Service on top of the initial basic installation that Microsoft described. Still no luck getting IIS working or IIS Manager to appear.
I have tried to research this problem of getting IIS to work on Windows 8.1 with no success and am at a loss. Suggestions welcome!
In Control Panel --> Programs --> Programs And Features --> Turn Windows features on or off -> Internet Information Services -> World Wide Web Services -> Common HTTP Features -> Static Content.
Also make sure .NET Extensibility 3.5 and .NET Extensibility 4.5 are checked.
Major fail by Microsoft. Why the hell would they turn off the most basic features by default. Go to Turn Windows features on or off (just search "features"). Look in IIS, WWW, Common HTTP Features. See attached image.screenshot
I have solved a couple of my problems.
I installed several more IIS modules: Static Content, IIS Management Console, and HTTP Errors.
I am now am able to find the IIS Manager in the Administrative Tools list and can use the IIS Manager.
Also, when I pressed Windows key + R and typed in services.msc, I still don't see Internet Information Services in the list. However, I do see "World Wide Web Publishing Service" in the list and it is shown as running. A page at Microsoft's Technet site indicates that it is related to IIS.
The HTTP Errors module gave me an error page rather than a blank page when I typed in localhost and also when I typed localhost/filename. This proved a HUGE help, because the error page identified the problem as a permissions issue. I thought I had dealt with the permissions issues, but this error page made it apparent that I had not.
When I typed in localhost, I got the permissions error. When I typed in localhost/iisstart.htm, I got the proper display of the file. When I created a simple .htm file, statictest.htm, and placed it in the wwwroot folder along with iisstart.htm, and typed localhost/statictest.htm, I got the permissions error.
So since one of the files was working and one wasn't, I decided to compare their permissions. (You do this using the File Explorer. Right click on the file, click on Properties, click on Security Tab. To make changes, click on Edit.) I saw that the successful one had a user listed that the unsuccessful one did not. So I added a user for the statictest.htm file to the permissions list with full control. That solved the issue for that file and it displayed normally.
I now am back to getting a blank page when I type in localhost. It must not be a permissions issue, because otherwise I'd get the permissions error page. I'm not sure what the cause of the blank page is. But as long as I can get files to display when I give their name, I am happy enough.
I am happy to report that my PHP installation is also working, at least as judged by the fact that the phpinfo() function displays properly.
So to sum up: if you are having problems getting IIS to work on Windows 8.1, try adding more IIS modules and make sure your permissions are in order. I think the most important ones to add are Static Content and HTTP Errors. Also, of course, CGI if you are going to use PHP.
I know this is an older post, but in case anyone, like me, already had "static content" enabled, there was one other thing that needed to be done to resolve this issue.
Under "Programs and Features" -> "Turn Windows features on or off"
Expand "Internet Information Services" -> "World Wide Web Services" -> "Application Development Features"
Make sure that "ASP.NET 4.5" (and if needed/installed 3.5) are selected. This should automatically check ".Net Extensibility" for the selected version, and it should also enable ISAPI filters and Extensions.
By default (for me at least) these options were not turned on when I enabled IIS. I was getting a 500 error in IE if I had "Show Friendly Error Messages" turned on in IE, but if I turned that option off, I would get a completely blank page.
For me, the reason was that I had two different HTTP handlers in the config with the same name. I didn't get any errors, just blank response.
I'm guessing that some other parts of the configuration may result in a similar behavior. Try commenting out some parts of Web.config file in case you cannot figure the problem out.
Same issue.
Win 10 upgraded from 7. Default documents server blank and without error.
Static Content and Default Document features already enabled.
I resolved by disabling both features, rebooted and tried(received error 404), enabled both features, rebooted, pages served properly.
For me, I was using Windows Server 2008 on an Azure machine, it was missing some packages which can be installed using "Web Platform Installer", and then search for "recommended server configuration for web hosting providers"
I encountered the blank page problem as well on IIS 8.5 on Windows Server 2012 R2.
I had StaticContent installed as Windows feature.
What finally fixed it for me was changing the Path Type of the StaticFile Handler under [IIS Manager -> Server on left pane -> Handler Mappings -> StaticFile] from "Unspecified" to "File or Folder".
You can also change this on a per web site basis instead of the entire server (but I don't really see a reason why to do so, as it breaks pretty much any page). Make sure, however, that the site does not have an overriding setting for the StaticFile handler, as the site scoped one is preferred over the global one.

ExportAsFixedFormat with Excel fails

I try to convert Excel files to PDF via COM automation. The code runs as a service using the system user. Unfortunately, I get the error "0x800A03EC" in the ExportAsFixedFormat() function. It works when I run this in an interactive session.
I've heard the systemprofile needs a Desktop folder, so I added those.
I've heard this also might have to do with the system user not having a default printer, so I added values to the following keys:
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\Devices
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\PrinterPorts
But this only makes Excel hang instead of throwing an exception immediately.
I'm out of ideas and thankful for any help.
You have to select a default printer for this user. Try to import following code into your registry. Note: Replace these printers for your own (virtual) printers.
Windows Registry Editor Version 5.00
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\Devices]
"Send To OneNote 2010"="winspool,nul:"
"Microsoft XPS Document Writer"="winspool,Ne00:"
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\PrinterPorts]
"Send To OneNote 2010"="winspool,nul:,15,45"
"Microsoft XPS Document Writer"="winspool,Ne00:,15,45"
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"UserSelectedDefault"=dword:00000000
"Device"="Send To OneNote 2010,winspool,nul:"
Of course you still have to create your Desktop folder in
C:\Windows\SysWOW64\config\systemprofile
or in
C:\Windows\System32\config\systemprofile
depending on your setup.
After these steps you should be able to export Word, Powerpoint and Excel to PDF by using a regular, non-interactive service (e.g. Windows NT/SYSTEM user). You don't need any alterations in your Component Services
Wrong:
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"UserSelectedDefault"=dword:00000000
"Device"="Send To OneNote 2010,winspool,nul:"
Correct:
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"UserSelectedDefault"=dword:00000000
"Device"="Microsoft XPS Document Writer,winspool,Ne00:"
I struggled with this mightily and this post was so close. After trying a number of other things I knew this post was close and thought I'd try something.
For the record, the "Desktop" folder fix in systemprofile fixed this issue when we were running Windows Server 2008 R2 and Excel 2013 Automation. This only started being an issue for after we upgraded to Windows Server 2012 R2 and Excel 2016. To eliminate Excel as the culprit, I tried on a server with Windows Server 2012 R2 and Excel 2013 and experienced very similar issues.
All automation worked just fine under Network Service, but ideally, we wanted to run our site under ApplicationPoolIdentity.
First things first, the application pool running with ApplicationPoolIdentity needs to Load the User Profile.
Start Run -> inetmgr
expand Server -> Application Pools
right click on your App Pool -> Advanced Settings
under Process Model -> Load User Profile <-- should be set to true
So now I had to figure out who this identity was. Maybe there's a better way to do this, but since I added the user to IIS_IUSRS this is where I found the information.
Windows -> Edit local users and groups
Groups -> right click IIS_IUSRS -> Add to Group...
Add...
Locations... (choose local server), click OK
In the Enter the object names to select box type IIS APPPOOL\<app pool name>
(note the space and the triple P)
also, <app pool name> is the name of your Application Pool in inetmgr
Now you should see as a Member of IIS_IUSRS IIS APPPOOL\ (SID) where SID is your applicationpoolidentity security identifier in windows. This will be a very long alpha-numeric dashed string like "S-1-5-##-#########-#########-##########-#########-#########"
Unlike the answers above, this was the user I needed to edit in the registry.
So now following the above answers I had to add the following to the registry. Note: Adding the keys to S-1-5-18 did not solve the issue, I had to add them to the SID of the ApplicationPoolIdentity found above.
[HKU]\SID\Software\Microsoft\Windows NT\CurrentVersion\Devices
"Send To OneNote 2010"="winspool,nul:"
"Microsoft XPS Document Writer"="winspool,Ne00:"
[HKU]\SID\Software\Microsoft\Windows NT\CurrentVersion\PrinterPorts
"Send To OneNote 2010"="winspool,nul:,15,45"
"Microsoft XPS Document Writer"="winspool,Ne00:,15,45"
[HKU]\SID\Software\Microsoft\Windows NT\CurrentVersion\Windows
"UserSelectedDefault"=dword:00000000
"Device"="Microsoft XPS Document Writer,winspool,Ne00:"
Notice how I used the "Correct" response from eletre/Robert. Using the OneNote option for Device did not work for me.
Hopefully this saves someone the trouble of hunting this down some day.

Resources