Summary
This document outlines several issues and their known workarounds that users of Microsoft® Internet Explorer® 7 must be aware of in conjunction with the following Citrix products:
- Citrix Presentation Server 4.0 and 4.5
- Citrix Password Manager 4.1 Service Pack 1
Citrix is committed to ensuring the best possible compatibility with the latest Microsoft products.
Citrix will supply best efforts support for Internet Explorer 7 in Presentation Server versions currently in mainstream maintenance. What that means is that Citrix will offer feasible workarounds for reported issues for Internet Explorer® 7 in Presentation Server versions currently in mainstream maintenance and for issues that do not have feasible workarounds we will apply best effort to supply hotfixes to address those issues. Full Support for Internet Explorer 7 is planned to be provided in a Presentation Server maintenance release scheduled for mid-2007.
This document will be updated as new information becomes available.
Issues:
Citrix Presentation Server 4.0 and 4.5
•
Smart card pass-through authentication fails with Web Interface if the Web Interface server is in the Trusted sites or Internet security zones.- After authenticating using a smart card with pass-through authentication, users are prompted for credentials when connecting to Web Interface. This happens because in Internet Explorer 7, the default value of the User authentication/Logon setting is defined as Automatic logon only in Intranet zone. In earlier versions of Internet Explorer, the default for the Trusted sites zone is Automatic logon with current user name and password.
A smart card logon to Windows requires a direct connection between the user’s workstation and the domain controller.
Workaround
If your Web Interface server logically belongs to the intranet and your corporate security policy permits you to add the Web Interface server to the intranet zone, follow these steps:
1. From the Tools menu, click Internet Options.
2. From the Security tab, click Local intranet.
3. Click Sites.
4. In the Local intranet dialog box, click Advanced and add the Web Interface server.
Note: If the Web Interface server was previously in the Trusted sites zone, you must remove it from that zone before adding it to the Local intranet zone.
•
Automatic update or installation of the Web Client fails if the Web Interface server is in the Trusted sites or Internet security zones.
- When Web Interface is configured to automatically update the Web Client at logon, the Information Bar appears within Internet Explorer, displaying the following text:
“This web site wants to install the following add-on: ‘Citrix Web Client’ from Citrix Systems, Inc.”
This occurs only if the Presentation Server Client is not present or is an older version, the user is an administrator, and automatic prompting for ActiveX controls is set to Disable for the security zone containing the Web Interface.
Note: In Windows XP Service Pack 2 with Internet Explorer 6, the default value of this setting for the Trusted sites zone is Enable. With Internet Explorer 7, the default for this zone is Disable.
Workaround
Each user must perform the following steps:
If you use Web Interface 4.0, see Knowledge Center article CTX108620 – Automatic Client Delivery Fails on Windows XP with Service Pack 2.
Then:
1. Log on to Web Interface.
2. On the Information Bar, click Install ActiveX Control.
3. At the Internet Explorer security warning prompt, click Install.
4. Accept the End User License Agreement.
If you want to suppress the Information Bar and your corporate security policy permits you to modify security zone settings, perform the following steps:
1. From the Tools menu, click Internet Options.
2. On the Security tab, select the zone that contains the Web Interface server and click Custom level.
3. Set Automatic prompting for ActiveX Controls to Enable.
4. Log on to Web Interface.
5. At the Internet Explorer security warning prompt, click Install.
6. Accept the End User License Agreement.
•
The Web Client does not run when the ICA Client Object was not used previously.
- The Information Bar appears within Microsoft Internet Explorer, displaying the following text:
“The previous web page might require the following add-on: ‘Citrix ICA Client Object (ActiveX Win32)’ from ‘Citrix Systems, Inc. (unverified publisher)’. Click here to allow it to run.”
-Or-
“This website wants to run the following add-on: ‘Citrix ICA Client Object (ActiveX Win32)’ from ‘Citrix Systems, Inc. (unverified publisher)’. If you trust this website and the add-on and want to allow it to run, click here..”
This occurs only if the Presentation Server Client was installed by another user, and Allow previously unused ActiveX controls to run without prompt is set to Disable for the security zone that contains Web Interface.
Workaround
If this matches your security policy, you can configure Internet Explorer to suppress the Information Bar by setting the value of Allow previously unused ActiveX controls to run without prompt to Enable for the security zone that contains Web Interface server. To do this:
1. From the Tools menu, click Internet Options.
2. On the Security tab, select the zone that contains the Web Interface server and click Custom level.
3. Set Allow previously unused ActiveX controls to run without prompt to Enable.
Otherwise, each user must perform the following steps:
1. Browse to Web Interface site.
2. On the Information Bar, click Run ActiveX Control.
•
With SpeedScreen Browser Acceleration enabled, some images are not displayed correctly when viewing Web pages with Internet Explorer 7 running as a published application.Citrix Password Manager 4.1 Service Pack 1
There are no known issues with Microsoft® Internet Explorer® 7 and Citrix Password Manager 4.1 Service Pack 1 at this time.
Source
Linear Mode
