About Terminal Server, Citrix, Delphi and other stuff
Today I was troubleshooting a warning message that popped up when launching a network application with RES Workspace Manager:
Usually this is a simple fix: add the servername (file://server) to the Local Intranet zone:
That worked when I launched the application directly. However when launching the application with RES Workspace Manager I would still get the warning. Even stranger: when I clicked Cancel the application would still be launched.
This problem seems related to the way Workspace Manager launches an applications: the program’s path is replaced with %respfdir%\pwrgate.exe <appid>.
A trace with Process Monitor showed that the ZoneMap was not even checked. That leaves us with two options to fix it:
Option #1: Change Security Settings for the Internet Zone
An easy way to get rid of this message is to allow Launching applications and unsafe files in the Internet Security Zone:
Internet Explorer warns us right away that this is a bad idea:
Option #2: Change Attachment Manager Policy
This option is less worse than option #1 but another solution is preferred. As a workaround it will do though.
Open the Managed Application and create a new User Registry Policy under Configuration. Import AttachmentManager.admx (usually in C:\Windows\PolicyDefintions).
Include .exe in the "Inclusion list for moderate risk file types":
.NET .NET FrameWork Active Directory Altiris Automation Manager Citrix Dell Delphi Excel Exchange Exchange2003 Exchange2010 Hack HP iOS Java LinkedIn Linux Lync Management Pack MSI Office Office 2010 Passat Password PowerPoint PowerShell RES RNS510 SasLibEx SCOM Security Terminal Server ThinApp TSAdminEx VBS VCDS Visual Basic Visual Studio VMWare Volkswagen VSAE Windows PE Wordpress XenApp