Discussion:
launching hta files from IE
(too old to reply)
Michael Lawless
2003-08-20 16:40:17 UTC
Permalink
Are there settings in IE 5 and IE 6 that would allow a local HTA file
to be launched without any security warnings. I am working on Windows
2003 Server but need it to work on all IE5 and IE6 instances. I have
tried various settings and cannot find a setup that works.

The page with the link to the HTA file will can from a 'Trusted Site'
and consequently have a custom setting if required, though this is not
desirable.

TIA

Michael
Michael Lawless
2003-08-21 08:16:50 UTC
Permalink
Thanks David,

The situation is that the HTA is currently installed on the local
machine by a Microsoft application. The html page is served from an
intranet/trusted source and as such the browser setting would only
need to be changed for 'Trusted Sites'. I understand the security
issues but for a 'Trusted Site' this should not be an issue given that
the user has actively added the site into its trusted list.

Do you know of configuration that would allow for the user not to get
the prompt.

Thanks,

Michael
HTA's dont have the same security limitations that normal html pages do.
They behave more like application exe files that are running locally on the
box with the same permissions as the currently logged in user. For this
reason, a security dialog is necessary to warn the user that this HTA could
do *anything* to destroy their machine. I cannot see why you would want to
disable this warning and open a potential hole.
If the hta is already downloaded to the user's pc as a file, the warning
should not come up. (ie if you save the hta to your desktop and then just
double-click it). If the hta is surfed to from a remote url, that url will
need to be in the trusted sites list.
--
Thanks,
David W. Lovell
This posting is provided "AS IS" with no warranties, and confers no rights.
If a script was included within this post, use of included
script samples are subject to the terms, specified at
http://www.microsoft.com/info/cpyright.htm"
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
Post by Michael Lawless
Are there settings in IE 5 and IE 6 that would allow a local HTA file
to be launched without any security warnings. I am working on Windows
2003 Server but need it to work on all IE5 and IE6 instances. I have
tried various settings and cannot find a setup that works.
The page with the link to the HTA file will can from a 'Trusted Site'
and consequently have a custom setting if required, though this is not
desirable.
TIA
Michael
Loading...