Well this definitely does not seem to be the case for all hosts - as we have this 'interactivity' working even for remote login into most of our w2003 host environments,where we have out-of-box security settings. So,there is some security switch which 'hardens' this property - as we see in some other environments. We are eager to find out what that 'switch' is.

We are trying to get an interactive command prompt,running with 'SYSTEM' user credentials The sequence of steps are as follows: 1) Get the local time (through the TIME shell command, for example) 2) Add one minute to this time 3) Run the AT command with this new time. 4) Wait one minute for the command window to appear. An example set is as below: E:\Documents and Settings\Adi>time The current time is: *16:29*:00.96 Enter the new time: E:\Documents and Settings\Adi>at *16:30* /interactive cmd.exe Added a new job with job ID = 1 We do get a command prompt with 'SYSTEM' privileges. Next,we attempt to do this on a remote w2003 host through REMOTE login. In this case,though we find the cmd.exe running in the task manager,we DO NOT see the command prompt in the foreground. What service/security setting prevents the command prompt to interact with the desktop in this case? We also confirmed that in certain other environments ,we do see the command prompt on the foreground ,even via remote login. Unfortunately,we have not been able to work out the security 'tweak',which obstructs our first environment from doing so. Any help will be much appreciated.

Is there some way to modify the Internet Explorer security settings for the 'LocalSystem' account. 'Local System' account is the user under which all windows services run by default. We need to achieve this either programmatically or through edit of registry settings. Internet security privileges for the 'LocalSystem' account (like allowign download of unsigned activex controls) cannot be modified from the browser.,unlike an interactive user. We also do not have the option to launch the browser programmatically by impersonatign as this user.

Thanks. One clarification - what is the option to do a similar operation on widows vista/2008 server? If we impersonate a logged-on user,though we do not see the browser,it serves the purpose for us. Will impersonating a interactvie user for a process launched from a windows service continue to work in vista/2008? Or will that be clamped on too?

We have a windows service which spawns a browser. To enable this operation,the service has been configured to "Interact with Desktop",runig as localsystem account. This does the desired,in most of the windows environments(2000,XP,2003). However,in some of the Windows 2003 boxes(not all),we find no visible browser instance. However,we have confirmed that the browser is indeed spawned under the 'SYSTEM' account through the task manager. This confirms that there is no problem in the execution of the executable as such. We have explicitly set the 'visible' property of the IE browser handle to 'true'. Is there some security setting/configuration that may potentially have been flagged to suppress the 'visibility' of the browser in these specific 2003 hosts? Any help on finding the source of this 'invisibility' of the browser will be much appreciated. Note:This happens only when the browser is spawned from a service.When spwned from command line(interactive),things work fine even in these particular hosts.

The problem is that the application does not even start executing a single line and returns with a file not found error ;however when the same application is executed from console(and not from a service as 'localsystem' account),it executes fine. But we found that when we comment off the 'CoInitiliazie' call then things seem fine for the application (though we obviously cannot invoke COM)

We have a windows service executing on a windows 2003 box as the 'LocalSystem' account. This service spawns off a executable. The executable in turn tries to create an instance of a COM object housed in a dll. However we find that in a particular host,the executable fails at the point where it tries to intialize COM through CoInitialize. We believe it is due to some permission violations on the box. What are the services/permissions to be in place for a windows service account to be able to invoke COM?

I have an xml similar to this : UserName.SWEUserName INPUT deactivate LOGO ................................... .................................. .......................... ......................... I need to transform it to the following: ....... ............ i.e all child nodes under the 'event' node get transformed to the attributes of the property node(node name as 'name' attribute and value as 'string_value'). Moreover , the number and name of child nodes under the different 'event' nodes can vary. How can we write a XSL template to convert all chiild nodes under 'event' (however much there may be) into the desired format.

We use IwebBrowser2 to Navigate to different pre-recorded urls. We create an instance on internet explore and then play back the urls to that particular window handle. However,this does not allow us to perform or measure the different stages independently like connect time,first-byte time etc. WinInet and winsock probably allows us to time these individual activities . But I am not sure whether they can be used to direct request to a particular windown handle(HWND) object. Is there some way to use the handle retrieved from IwebBrowser2 to perform the individual stages like connect,send,receive etc using iwininet or winsock? or does IwebBrowser give APIs to perform these activites individually?

We have a COM dll built on windows 32 bit OS. When this dll is attempted to be registered on a 64 bit platform,we get the following error: INFO: Calling Action w32OcxRegActions10.2.0.1.0 RegisterOCX OcxPath = ..........dll WorkingDir = ...........\bin INFO: Exception thrown from action: RegisterOCX Exception Name: ErrorRegisteringOCXException Exception String: OLE initialization or OCX load error while registering OCX Exception Severity: 0 This dll is registered successfully on a 32 bit platform. Does not a dll built on 32-bit XP(win2k) get registered on a 64-bit XP using regsvr32?

What are the conditions in which a CAB fiel refuses to overwrite a previous downloaded instance in IE. Is it the time-stamp of the CAB file;or do CAB files need to mention a versioning too. We are downloading a CAB file from a jsp with a OBJECT tag. After we modify the CAB file and repackage it ,we find that CAB file does not download the new instance again,as the old instance is already downloaded into the client box. We are creatign the CAB file with visual studio. If versionign is the answer to overwriting downloaded CAB files from IE - how do we version CAB files in 'VS Deployment type of projects'

We attempt to create new instance of Internet Explorer(6.0/7.0) as a separate process. We have tried CoCreateInstance,ShellExecute and ShDocVw. But in all these cases,the new browser is launched as part of an existing IE process. How do we open the new window as a separate process? Is there some registry or meta-data settign which enables each IE instance to open as a separate process?

We have an xml viz. .... .... .... .... .... The number of events will be dynamic. For a relevant component,we need to return the cooresponding events pipe-delimited. We arrive at the particular component through SelectNodes - is there a smart,concise XPATH expression which can allow me to return the set of events in the way we want,rather than recursing through the set. Note that component and event nodes are parent(ed) by 'element'. We are using javascript.

We are creating a instance of Internet Explorer with CoCreateInstance,of type CLSCTX_LOCAL_SERVER. Though the IE instance is successfully created ,it picks up the process id of an existing prior opened IE instance. Is this behaviour inherent to IE? Is ther any way to create a IE instance with its own specific process id.

We test a particular constriant in our XSLT and throw a custom exception on failure: Here exception is defined as: xmlns:exception="http://..../util.exception.ValidationExceptionThrower" The problem is that this kind of exception handling by-passes the java code. In our Java client,we have the following: { ......... TransformerFactory tFactory = TransformerFactory.newInstance(); transformer = tFactory.newTransformer(source); .... StreamResult result = new StreamResult(); java.io.ByteArrayOutputStream outputXmlResult = new java.io.ByteArrayOutputStream(); result.setOutputStream(outputXmlResult); transformer.transform(xmlsource, result); setOutXml(outputXmlResult.toString()); return "Success"; } catch(ValidationException ex) { System.out.println("INSIDE VALIDATIONEXCEPTION"); ...... } finally { return "failure"; } } The exception thrown by XSLT does not get trapped by the error handler in the client. How can XSLT be adapted to throw a 'catchable' exception.

We are trying to enforce a couple of business constrainrs with XPATH . A sample xml node is as follows: ..... ..... IE browser Navigate http://www.....com/ ....... ....... If we need to ensure that the XML has ATLEAST one 'element' node containing text as "IE" we do: ERROR: Atleast one IE element needed But we need to ensure that ATLEAST one of the IE 'event' nodes has a combination of 'element' as IE and 'value' node containing the text "Logout" i.e. IE .... Navigate ...Logout... How do we enforce this occuurrence constraint through template?

I am accessing a website in IE,using a domain and localsystem account . With the former account , things are fine;with the 'localsystem' account I get a warning message 'Javascript is not enabled for the website'. Where can we view/modify user settings for IE.I m using IE6.0/7.0.

Sorry for the misunderstanding Dave. Is there some write-up(or search terms) on the 2003 restrictions that you mentioned related to IE settings? I have searched a lot but do not find adequate documentation on the way 2003 'localsystem' locks IE up. Unfortunately,i would require some write-up to back me up on this arguement. It will be a great help - thanks again for your support.

Hi Dave, What did you mean by 'logon locally to the servers console' ? Is there some way possible to logon to a console with the 'localsystem' account privileges - to simulate the bhaviour?

To create a 'interactive' service on windows - we use a localsystem account ,with 'Interact with desktop' option. Is there any other account which allows a service to be interactive - e.g. can a service be made interactive while it is running under the credentials of a domain account in 2000/XP/2003 ? We launch an IE browser from the service - and hence the service neesd to be interactive.