iPrint and the silly ActiveX prompt

Hey there,

I get that silly activeX prompt every I go to the iPrint web page to install a printer.

Is there some way I can set it for all my client to just run the silly thing without being prompted?

Tom
  • On Thu, 13 Aug 2009 21:33:40 0000, Tom Hafemann wrote:

    > I get that silly activeX prompt every I go to the iPrint web page to
    > install a printer.
    >
    > Is there some way I can set it for all my client to just run the silly
    > thing without being prompted?


    I've got a custom template I've created for use with group policies (via
    ZEN or AD) that's suppose to define that as an approved control so users
    don't get prompted. It works in a couple of locations while in another
    it didn't seem to work, but if you e-mail me I'll send it to you and you
    can give it a shot. E-mail me at jmarton at h s e muni dot com.


    --
    Joe Marton
    Novell Knowledge Partner
    SUSE Linux Enterprise 11 is ready for action.
  • In Internet Explorer the prompt is controlled via the security settings.
    Those settings are individually set on the three different zones,
    "Internet", "Local Intranet" and "Trusted Sites".
    When you access a site you can see in the bottom list (to the right) which
    zone IE thinks the site is in.
    Just change the ActiveX prompt setting for the zone where your iPrint server
    lives.

    Also see:
    "Internet Explorer security zones registry entries for advanced users"
    http://support.microsoft.com/kb/182569


    Regards
    Rolf Lidvall
    Swedish Radio (Ltd)


  • > It works in a couple of locations while in another
    > it didn't seem to work,


    If you want the template to work "everywhere" you must include all zones.
    You can not "know" in advance in which zone an iPrint server lives in a
    particular network.
    For instance, where I work we have decided to put some intranet servers in
    the trusted zone because of some special security settins we don't want to
    implement on the local intranet zone.
    The way IE detects zones is very sparse documented. For example: I
    discovered that if WINS is enabled in the network, IE also uses that to
    calculate the zone. I have not been able to find any docs regarding that.


    Regards
    Rolf Lidvall
    Swedish Radio (Ltd)


  • On Fri, 14 Aug 2009 10:36:54 0000, Rolf Lidvall wrote:

    > If you want the template to work "everywhere" you must include all
    > zones. You can not "know" in advance in which zone an iPrint server
    > lives in a particular network.


    I haven't placed any of my servers in any particular zone. Plus it looks
    like some sort of GP issue as I had a problem getting it to work in our
    Milwaukee office initially, but by simply copying the GP over from our
    server in Chicago to the one in Milwaukee it magically started working.
    If the problem was the "zone" I wouldn't think copying the GP over would
    matter since there's nothing in the GP defining any server in any zone.


    --
    Joe Marton
    Novell Knowledge Partner
    SUSE Linux Enterprise 11 is ready for action.
  • > I haven't placed any of my servers in any particular zone.

    Yes, that's exactly what I'm trying to say, if you exlicit don't put a
    server in a zone, IE calculates the zone by checking DNS, WINS, WPAD etc.
    For a particular network it's hard to know in advance where IE will put a
    server if you don't specify it yourself.
    That's why you must change the ActiveX settings for all zones if you want to
    create a template that works "everywhere".
    Though I would not recommend doing this, because it's certainly a security
    issue.


    Regards
    Rolf Lidvall
    Swedish Radio (Ltd)


  • On Fri, 14 Aug 2009 14:05:21 0000, Rolf Lidvall wrote:

    > Yes, that's exactly what I'm trying to say, if you exlicit don't put a
    > server in a zone, IE calculates the zone by checking DNS, WINS, WPAD
    > etc.


    Again, copying the group policy over from a working location to a non-
    working location suddenly fixed things even though nothing in GP defines
    the server's location. So it doesn't seem like it has anything to do
    with how IE calculates the server.


    --
    Joe Marton
    Novell Knowledge Partner
    SUSE Linux Enterprise 11 is ready for action.
  • On Fri, 14 Aug 2009 14:05:21 0000, Rolf Lidvall wrote:

    > Yes, that's exactly what I'm trying to say, if you exlicit don't put a
    > server in a zone, IE calculates the zone by checking DNS, WINS, WPAD
    > etc.


    Again, copying the group policy over from a working location to a non-
    working location suddenly fixed things even though nothing in GP defines
    the server's location. So it doesn't seem like it has anything to do
    with how IE calculates the server.


    --
    Joe Marton
    Novell Knowledge Partner
    SUSE Linux Enterprise 11 is ready for action.
  • > So it doesn't seem like it has anything to do
    > with how IE calculates the server.


    It has to do with how the template sets the ActiveX security settings for
    the zone server is in.


    Regards
    Rolf Lidvall
    Swedish Radio (Ltd)


  • On Fri, 14 Aug 2009 17:58:34 0000, Rolf Lidvall wrote:

    > It has to do with how the template sets the ActiveX security settings
    > for the zone server is in.


    I'll have to look, but as I recall the administrator approved controls
    didn't have anything to do with zones. I'll have to go back in C1 to
    double-check.



    --
    Joe Marton
    Novell Knowledge Partner
    SUSE Linux Enterprise 11 is ready for action.