Elevated Web Installations fail to elevate due to IE Group Policy

Version 1

    Verified Product Versions

    AppSense Application Manager 8.9AppSense Application Manager 8.8

    Introduction

    Elevated Web Installations (Active-X controls) within Application Manager may fail from HTTPs addresses and still display a UAC prompt.

    When logging is enabled for Application Manager, you should see a logfile similar to "Application Manager_AppSenseInstallAX_dd_mm_yyyy_hh_mm_ss.log" created.

    NOTE: As well as the above logfile, another simple check with any ActiveX install (elevated by Application Manager), is to check for Application Manager "progress bar" which is seen whilst the .cab file is downloaded, and an AmInstallAx.exe process running during this time.

    Towards the end of the logfile, the following error may be logged:

    T003876 16964094 05:45:32.092 [CDownload::XBindStatusCallback::OnStopBinding] OnStopBinding hr=[0x8007007e The specified module could not be found.] statusText=[A code download error has occurred: The specified module could not be found.
    For more error details please see: ?CodeDownloadErrorLog!name={E06E2E99-0AA1-11D4-ABA6-0060082AA75C}]
    T003876 16964094 05:45:32.092 [CAMInstallAXDlg::SetProgress] Setting progress % = [100]

    Detail

    The CodeDownloadErrorLog referenced is a little tricky to find - as the user, it will appear in Temporary Internet Files, however this is just a placeholder and the file cannot be viewed. If you locate the file, right-click and select "Properties" - the "real" name (it's name on disk) will then be displayed, and this can be found in one of the Content.IE5 subfolders, alterntively you can use Process Monitor to look for .htm files being written by AmInstallAx.exe - using this method you'll see an event similar to the below:

    10:45:32.1013764    AMInstallAX.exe    CloseFile    C:\Users\username\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KTE6PJ52\CAJF1IWZ.HTM

    Once you locate this file, in this case, the error is also seen in the download log (there are others that be logged here, so it's always a good idea to locate and check the CodeDownloadErrorLog if applicable):

    *** Code Download Log entry (21 Sep 2015 @ 14:21:07) ***
    Code Download Error:
    (hr = 8007007e) The specified module could not be found.

    Operation failed. Detailed Information:
    CodeBase: https://join-test.webex.com/client/WBXclient-T29L10NSP13EP41-30001/webex/ieatgpc1.cab
    CLSID: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}
    Extension:
    Type:

    LOG: Reporting Code Download Completion: (hr:8007007e (FAILED), CLASSID: e06e2e99..., szCODE:(https://join-test.webex.com/client/WBXclient-T29L10NSP13EP41-30001/webex/ieatgpc1.cab), MainType:(null), MainExt:(null))
    --- Detailed Error Log Follows ---
    LOG: Download OnStopBinding called (hrStatus = 800c0008 / hrResponseHdr = 0).
    LOG: Redundant download attempted, but no more codebases available.
    LOG: URL Download Complete: hrStatus:800c0008, hrOSB:0, hrResponseHdr:0, URL:(https://join-test.webex.com/client/WBXclient-T29L10NSP13EP41-30001/webex/ieatgpc1.cab)
    LOG: Reporting Code Download Completion: (hr:8007007e (FAILED), CLASSID: e06e2e99..., szCODE:(https://join-test.webex.com/client/WBXclient-T29L10NSP13EP41-30001/webex/ieatgpc1.cab), MainType:(null), MainExt:(null))

    Working through a list of applied Internet Explorer policies, this was narrowed down to a policy to set the Internet Explorer 'advanced' setting for "Do not save encrypted pages to disk" - once this was removed, the installation completed succesfully.

    NOTE: Installations the do not use HTTPS would, under this scenario, still work as expected.