Setting Internet Explorer Security Settings for Use with K1000 Machine Actions (111251)

The K1000 Machine Actions feature uses ActiveX controls to launch a session on the browser host using the command you specified in the Machine Actions Setting.

You can configure Internet Explorer Security Settings to allow ActiveX controls from the K1000 interface in order for Machine Actions to be launched successfully.

If you get the follow error message when you select a machine action, either the Internet Explorer settings are incorrect or the program the machine action is trying to launch does not exist at the specified path:

In order to resolve this error, verify the security settings for the Trusted Sites zone in Internet Explorer by clicking on Tools, then Internet Options on the machine used to browse the SMA Appliance.

How to configure the Security Settings in Internet Explorer

INTERNET EXPLORER 6: Launch Internet Explorer 6 and navigate to:

1. Tools | Internet Options | Security
2. Select Trusted Sites Icon
   1. Add Kbox IP address to the zone
   2. Require Server Identification (Uncheck)
3. Click Custom Level button
4. Reset to Low or Medium Low
5. Under ActiveX Controls and Plugins
   1. Automatic Prompting for ActiveX controls > Enable
   2. Download unsigned ActiveX controls > Enable
   3. Initialize & script ActiveX controls not marked safe for scripting > Enable
   4. Run ActiveX controls and plugins > Enable
6. Click OK
7. Click Yes
8. Click OK

INTERNET EXPLORER 8: Launch Internet Explorer 8 and navigate to:

1. Tools | Internet Options | Security
2. Select Trusted Sites Icon | Sites Button
   1. Add Kbox IP address to the zone
   2. Require Server Identification (Uncheck)
   3. Click Close
3. Custom Level > Medium
4. ActiveX Controls Plugins
   1. Allow previously unused ActiveX controls > Enable
   2. Allow script lets > Enable
   3. Automatic Prompting for ActiveX controls > Enable
   4. Download unsigned ActiveX controls > Enable
   5. Initialize & script ActiveX controls not marked safe for scripting > Enable
   6. Run ActiveX controls and plugins > Enable
5. Click OK to close Security Settings Window
6. Click OK to close Internet Options Window

INTERNET EXPLORER 9, 10 & 11: Launch Internet Explorer 9-10-11 and go to:

1. Tools | Internet Options | security
2. Select the Trusted Sites icon and then the Sites button
   1. Add the IP address of the Kbox to the zone
   2. Require server Verification (uncheck)
   3. Click Close
3. Customize Level > Medium
4. ActiveX Controls Plugins
   1. Allow previously unused ActiveX controls > Enable
   2. Allow script lets > Enable
   3. Request confirmation for ActiveX controls > Enable
   4. Download unsigned ActiveX controls > Enable
   5. ActiveX initialization and script control not marked as safe for the script > Enable
   6. Execute ActiveX controls and plugins > Enable
5. Click OK to close the Security Settings window.
6. Click OK to close Internet Options window.

How to configure the DEVICE ACTION on the SMA

This feature is only supported on Windows devices. If you enable ActiveX in Microsoft Internet Explorer, the device action runs using ActiveX. If ActiveX is disabled, or you want to use a different browser, the Windows device you are running the device action from must have the KACE Agent version 7.2 or later agent installed and connected.

When you initiate device through the agent, the action executable must be placed in your %PATH%. The agent is 32-bit, so on 64-bit Windows devices, use %windir%/System32 as an alias to the %windir%/Wow64 directory. If you need to run a program that's located in the %windir%/System32 directory on a 64-bit Windows system, you must use the %windir%/SysNative virtual directory. You can either add %windir%/SysNative to your %PATH% environment variable or provide a fully-qualified path by prepending %windir%/SysNative to your executable when defining your machine action.

To verify the Device Action Settings:

In the SMA Administrative Console, click Settings | Control Panel | General Settings.

Scroll down to Device Actions and click Add New Action

In Command line verify the path to the executable on the local host.

ie: UltraVNC viewer is "%ProgramFiles%\\ultravnc\\vncviewer.exe" KACE_HOST_NAME where KACE_HOST_NAME is a variable that is automatically inserted from the Inventory when the Machine Action runs.

To test, copy the command line and run on the command line of your local system, substitute the variable with an actual host name.

Click Save.

Note: Environment variables such as Program Files may not work on all systems. For example UltraVNC viewer on Windows 7 64-bit is installed in the Program Files (x86) directory therefore %ProgramFiles% in the command line will not locate the executable.

Example:  "C:\Program Files\UltraVNC\vncviewer.exe" KACE_HOST_NAME

NOTE:  This article was tested with Internet Explorer 11 using the PING Machine action.
             On some non-English OS the variables may fail, so the command should be in the path environment.

See KB 127452 to set up Machine Actions on Chrome via IE Tab extension.