login vsi company logo login vsi company logo 250x40
  • Home
  • Blog
  • Login VSI
  • User account control impact on automating Internet Explorer during a Login VSI test

User account control impact on automating Internet Explorer during a Login VSI test

User account control impact on automating Internet Explorer during a Login VSI test

If you’ve been in touch with our Login VSI support department regarding an Internet Explorer issue, we may have asked you to enable protected mode. We usually ask to enable Protected Mode in cases where we cannot interact with the web page. That seems strange. Why would adding additional protection allow us to interact with the web page after all? The answer is a set of security features commonly known as user account control.

Protected mode is part of that set of security features. Protected Mode prevents a malicious website from being able to compromise the security of your system by running Internet Explorer with a lower so- called integrity level. Integrity levels control which level of application can talk to each other programmatically.

user account control impact on automating internet explorer during a login vsi test enable protected mode

To enable Protected Mode in IE, go to Internet Options, select the Security tab, and check the Enable Protected Mode box.

Three integrity levels

There are 3 integrity levels: Low, Medium and High. High integrity level processes are typically processes running with administrator rights or even system level rights. Medium is the default normal level and Low is for untrusted processes. A process can talk to processes down the chain. High can talk to Medium and Low, for example. But you cannot go up the chain. This feature was introduced to combat so called shatter attacks.

Impact on Internet Explorer

Internet Explorer runs with the Low integrity level by default. Internet Explorer will switch to a higher integrity level where needed. An Intranet website, where protected mode is disabled, will run with the Medium level integrity level, for example. This switch is where the problem lies. When you start Internet Explorer programmatically, you get a reference to the newly started Internet Explorer process. That process starts with the Low integrity level.

If the website is located in an Intranet zone, then Internet Explorer will start a second process that runs with the Medium integrity level. But the program still has a reference to the old, Low integrity level process. This is why you might see CTXConnect being unable to interact with a website, or the Login VSI engine failing to be able to interact with an instance of Internet Explorer. When Protected Mode is enabled, a website is always run with the Low integrity level. The program retains the ability to control the application, as there is no need for a second process.

user account control impact on automating internet explorer during a login vsi test launcher

Login VSI has encountered an unexpected error and cannot initiate a session.

Conclusion: Why enable Protected Mode?

When you start Internet Explorer (IE) programmatically, IE runs with the Low integrity level but when you browse to an Intranet zone website, IE will start a second process with the Medium integrity level. Because of the different integrity levels, Login VSI will be unable to interact with Internet Explorer. Enabling Protected Mode will make sure that Internet Explorer is always running with the Low integrity level (also in an Intranet zone) and Login VSI is able to communicate with the webpage at all times.

And if you still have trouble with IE, let us know by contacting support@loginvsi.com.

About the author

Dennis Geerlings started at Login VSI about 4 years ago and worked as a consultant within Login Consultants. He supported multiple customers in migration projects. Presently, Dennis is support manager and lead consultant at Login VSI. In these roles he supports customers and partners in the US and Canada, co-develops the Login VSI product, and serves as a pre-sales engineer for enterprise customers. 

Tags: How-to, Login VSI, Load Testing, Best Practices, Support

Popular Blogs


The VDI Performance Summit - Virtual Conference and Expo

Visit the VDI Performance Summit to gain knowledge and experience about performance and tuning VDI, improving End-User Experience and IT service. Join us at the ONLY virtual event 100% dedicated to VDI performance and tuning | May 2, 2019 This 1-day event offers key-notes presented by the best VDI performance experts in the world, technical and business oriented breakout sessions, the possibility to chat with experts directly to discuss your own situation, and a virtual exhibit hall featuring… Continue Reading

Scalability testing Parallels Remote Application Server with Login VSI

Recently I went to VMworld in Barcelona where Login VSI had a booth on the expo... While I can’t remember exactly how many conversations I had - there had been so many that I lost my voice on day one. What was new this year is that quite a few people asked if our software is compatible with the solutions from Parallels specifically their Remote Application Server (RAS) (Datasheet). Continue Reading
Login VSI Blog Article - Microsoft Windows 10 Default FTA Associations - Teaser Image

Windows 10 Default File Type Associations and Login VSI

When Login VSI 4.1 was released, the majority of desktops were running Windows 7 and life was easy. We’d set the default filetype for an application and it would simply work. The default and industry standard workloads in Login VSI include launching and using Adobe Reader as part of the virtual user simulation. Because Login VSI doesn’t always know which version of Adobe Reader is installed, or where it’s installed, the workload relies on the file type association (FTA) for .pdf documents to be… Continue Reading
Login VSI - Press Release - IGEL - Login VSI Partner to Optimize End User Computing Experience Image

[Press Release] IGEL Partners with Login VSI to Optimize the End User Computing Experience

Login PI enables organizations to better protect the performance and availability of their IGEL OS-powered virtual desktop environments San Francisco, USA, Feb. 6, 2019: IGEL, a world leader in software-defined endpoint optimization and control solutions for the secure enterprise, today announced that it is partnering with Login VSI, provider of software solutions to test and actively monitor the performance and availability of virtual desktop environments, including VDI and… Continue Reading
Login VSI - Blog - Login PI Blog Teaser Image - Windows Virtual Desktop: How To Monitor User Experience With Login PI

Windows Virtual Desktop – How to Monitor User Experience?

Microsoft has just announced the public preview of their new Windows Virtual Desktop (WVD) offering at Microsoft Ignite on Tour in Amsterdam today. For those of you who’ve not followed the rumors or the private beta, here’s the outline... Continue Reading
Investigating Online Application Performance with Login PI

Investigating Online Application Performance with Login PI

As many companies do, we use a CRM system. Recently, I have been getting complaints about our cloud CRM system, Microsoft Dynamics, being slow. I tried to investigate this by shadowing one of our users to see what was wrong. As expected, everything was fast. 15 minutes later, the same user reported slowness again. How could I investigate this without bothering the users? Continue Reading
Cookie Settings