Mojo George

Hi All,

I need to launch IE in protected mode from a high integrity process. I could launch IE with low IL using samples provided on MSDN, but its protected mode status is off. How can I launch IE in protected mode from a high integrity process

Thanks,

Mojo



Re: Internet Explorer Extension Development How can I launch IE in protected mode from a high integrity process?

tkeller01

Hi, Mojo

If you don't need to control navigation via IWebBrowser2 or use a WebBrowserEvents sink, then IELaunchURL will create a Protected Mode IE for you.

If you do need consistent property or event sink support while navigating, then you may be out of luck until Microsoft releases a service pack to address current problems with automating IE through IWebBrowser2 and the interference that occurs with this approach due to Protected Mode. See this post for more detail.

regards,

--Todd






Re: Internet Explorer Extension Development How can I launch IE in protected mode from a high integrity process?

Sharath Udupa - MSFT

Launching and Navigating a Protected Mode Process

If your application uses CreateProcess to launch IE, it should call IELaunchURL on Vista. This will ensure that your application gets the right return values and that IE launches in Protected mode for URLs whose zone has Protected mode on. If you need to determine whether a specific URL will open in a low (Protected mode) or a medium integrity IE process before launching IE, call IEIsProtectedModeURL. Note that a high integrity process with administrator privileges will launch a high integrity IE process with Protected mode off. If you want to launch Protected mode from your high integrity process then first create a medium integrity process, which will launch your high integrity process and IE.

From http://msdn.microsoft.com/library/default.asp url=/library/en-us/ietechcol/dnwebgen/protectedmode.asp





Re: Internet Explorer Extension Development How can I launch IE in protected mode from a high integrity process?

Mojo George

Hi Todd and Sarath,

 

I doní»t need to control navigation, just need to launch. I tried with IELaunchURL. The results in different cases are as follows.

 

1.    Use IELaunchURL from a high integrity process

Result: IE is launched with high integrity and protected mode is OFF.

 

2.    Create a medium integrity process from a high integrity process, and try IELaunchURL from medium integrity process

Result: IE is launched with meduim integrity and protected mode is OFF

 

3.    Open a medium integrity process and try IELaunchURL

Result : IE is launched with low integrity and protected mode is ON.

 

From the above experiments I found that IELaunchURL function will not launch IE in protected mode when we tried from a high integrity process or a medium integrity process whose parent is a high integrity process.

 

I actually want to launch IE in protected mode from a process having high integrity level. Please give your suggestions.

 

Thanks,

Mojo





Re: Internet Explorer Extension Development How can I launch IE in protected mode from a high integrity process?

Mojo George

Hi All,

Any suggestions to solve this problem

Thanks,

Mojo





Re: Internet Explorer Extension Development How can I launch IE in protected mode from a high integrity process?

tkeller01

Hi Mojo:

Are you navigating to the same URL in all three cases I would have thought that zone security settings have the final say when using IELaunchURL. Specifically I was wondering if you navigated to a URL in your intranet or trusted sites zone, which could account for protected mode being off in case 2.

If you were, then the key might be in this sentence from Sarath's post:

"If you want to launch Protected mode from your high integrity process then first create a medium integrity process, which will launch your high integrity process and IE"

You've found that a medium IL process created by a high IL process still launches IE with protected mode off. It looks like the documentation is saying the you should have the high IL process launched by a medium IL process. When it needs to navigate, the high IL process then uses the medium IL process as a broker. I haven't tried this myself, but that's how I understood it to work.






Re: Internet Explorer Extension Development How can I launch IE in protected mode from a high integrity process?

Mojo George

Hi Todd,

Thank you for reply.

The URLs I tried were of internet websites, which were not listed in trusted or restricted zones.

The high integrity process from which I want to launch IE is installer. Installer is launched with high IL.

Mojo





Re: Internet Explorer Extension Development How can I launch IE in protected mode from a high integrity process?

hao1st


I was trying to launch IE from a medum-level or high level process, I met the same problem when I used IELaunchURL. I noticed that it produce two IExplore.exe. One of them is used to navigate to the specific URL, the other one seems no useful (only takes 60K memory). I close the browser window, one IExplore.exe was closed, but the other one which takes 60K memory) was still running from the Task manager, and I could not even kill the process. I was very confused about the behaviour. Can you let me know where you get the sample code on MSDN for launching IE with low IL

Thanks,
Hao




Re: Internet Explorer Extension Development How can I launch IE in protected mode from a high integrity process?

R.Hartmann

I have the same problem:
Launching IE from a high integrity process switches off the protected mode. Following the white pager http://msdn.microsoft.com/library/default.asp url=/library/en-us/ietechcol/dnwebgen/protectedmode.asp
i have started a medium integrity process from the high integrity process using CreateProcessAsUser() and starting IE using IELaunchURL(). But it doens't work as described here by several people. I searched all the postings but i can't find a solution. So please give me a hint how to solve this nasty problem.

Thank you
RH