Issue with Microsoft Edge Browser Plugin: Local Exe Execution Results in 'Access Denied'

Anonymous
2024-01-30T11:37:34+00:00

Hello ,

I am encountering a problem with an Edge browser plugin that tries to run a locally installed exe on the client when loading a specific URL. The exe is located in the "Program Files (x86)" directory and is 64-bit. The whole thing is executed on a Windows Server 2019, which is operated as a Terminal Server. Consequently, the user uses the RDP protocol to work with the solution.

When the exe is run manually as a logged-in user (on the Terminal Server), it starts without any problems. However, when I try to run the exe via the browser plugin, I get the error message "Access denied" via an internal logger and the exe cannot be started.

Here is some additional information: When I run Edge in IE Mode, the exe starts without any problems.

Since I did not develop this browser plugin myself, please advise me on the following points:

  1. is it generally possible for a browser plugin to start a locally installed exe in Server 2019?
  2. are there any recommended adjustments to the group policies (Edge / Windows) that could enable this execution?

Important: The problem does not exist if I use the solution on a Windows 10 client with the same version of Edge (120) incl. its GPOs. Therefore, this must have something to do with Windows Server 2019 in combination with a modern browser like Edge (or Google Chrome).

I appreciate any assistance.

Best regards

*** Moved from Microsoft Edge / Extensions / Windows 10 ***

Windows for business Windows Server Performance Application technologies and compatibility

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Anonymous
    2024-02-01T06:02:12+00:00

    Hello

    Thank you for posting in Microsoft Community forum.

    Is it generally possible for a browser plugin to start a locally installed exe in Server 2019? Yes, it is generally possible for a browser plugin to start a locally installed exe. However, modern browsers like Edge and Chrome have implemented stricter security measures, which might prevent direct execution of local exe files. In your case, since the exe runs without issues in IE Mode, it suggests that the plugin might be using some legacy technology like ActiveX, which is only supported by Internet Explorer.

    Are there any recommended adjustments to the group policies (Edge / Windows) that could enable this execution? Yes, there are several group policy settings that you can adjust to manage Microsoft Edge on Windows Server 2019. Here are some steps you can follow:

    • Download and install the Microsoft Edge administrative template: This will add rules and settings for Microsoft Edge to the group policy Central Store in your Active Directory domain.
    • Set mandatory or recommended policies: Microsoft Edge supports both mandatory and recommended policies. Mandatory policies override user preferences and prevent the user from changing the policy. Recommended policies provide a default setting that the user can override.
    • Use the Enterprise Mode Site List: This allows you to specify which websites should be opened in Internet Explorer mode.

    You may also need to adjust the UviProcessExcludes REG_SZ value in the registry. You can locate it at HKEY_LOCAL_MACHINE > System > CurrentControlSet > Services > CtxUvi and add msedge.exe; to the end.

    Best Regards,

    Wesley Li

    0 comments No comments