SUPPORT Q&A - Automating Aras Innovator Client Configuration - .Net Client and IE Settings

Parag_Mahajan - Friday, August 19, 2011 8:06 AM:

Parag_Mahajan - Friday, August 19, 2011 8:10 AM:

Please refer this correct post.
-------------
Hi,

I am looking at options to deploy Aras Innovator solution on internet.
However, in order to use Aras Innovator Client, we need to do additional configurations on Client systems like IE settings and running SDNS.exe. I don't want to limit the access to only Administrator users, but non-administrators should also be allowed to access it.

Please find my queries below.
1) I am trying to find out ways to avoid doing any manual configuration using Administrator user, i.e. to launch Aras Innovator Client AND running SDNS.exe using Administrator to add CAS Policy, AND Internet Explorer browser settings like enable activex scripting.
Do you have any pointers on how we can go about it?

2) If we cannot avoid this, we can try to automate this configuration.
For this, I tried to add the .Net CAS policy under ‘user’ level runtime security policy using CASPOL.exe.
With this method, I do not need Administrator rights, but it fails to launch the Aras Innovator Client.
Please let me know if you have any thoughts or pointers about this.

Thanks and Regards,
Parag

eric_h - Friday, August 19, 2011 3:33 PM:

Parag,

Here is some info that might be of some help. Aras 9.3 (not sure about earlier) only uses and needs to set the security policy for .NET 2.0 - you can ignore setting anything for .NET 1.1. You could create a batch file that used the caspol.exe command like utility to set the policy. There is also a way to push out a policy from a centralized server, but I don't have experience with that.

As far as setting the IE client settings, I know that out of the box running XP and IE8 I have had little issues and have actually not needed to change anything myself. I think things get trickier with Windows 7 and/or IE9. I had to set some IE client settings in the past, and remember sort of 'reverse engineering' where the settings were stored in the registry and created a registry script that made the changes. I may decide to try the same for internal users so they don't need to hand make the changes themselves. But that is not on the top of my list and cannot remember how long such a thing took me in the past. But that is an option.

As far as running as an Admin to make .NET security changes, I know on Windows 7 you have to run whatever you use (SDNS.exe or caspol, etc.) as an administrator. I think most of our XP users can just run as their logged in user account.

That is about as much as I know on the matter at this point.

Eric

Ronan - Monday, August 22, 2011 9:51 AM:

Hi,

There's documentation on that subject, did you have a look? See paragraph "4 IT System Administrator Push Configuration".

Tell us if that helps :)

?
Ronan Jouchet - PLM Consultant, Processia Solutions