Website works in IE 11 when run as administrator, not normal user

[tonyyeb]

Not sure where to post this but here goes. We have a website that works as intended when IE 11 is "run as administrator" (right click option on iexplore.exe). But normal users the website doesn't do what it should. What is the best way to find out what the issue is? I'm guessing it is permission based (or Group Policy perhaps?) so any ideas? tried Process Monitor but going through that seemed like an absolute nightmare!

 

But we also have this scenario too...

 

A user in the domain who is a domain admin logs onto his computer and IE11 does what it should, web site works. Logs onto my PC and IE11 does not work. If he does "run as administrator" it works.

 

So I copied his account in Active Directory, same group membership, same OU location etc... Log onto my PC and IE11 works! We do not use roaming profiles and both users had NEVER logged onto my PC. I checked Task Manager to see if somehow this new account was running IE with elevated privileges by default, but no.

 

Now I'm totally stumped! Not sure what avenue to go down next... Any ideas very welcome!!

[6Foot2]

Internet Explorer Enterprise Mode?

 

Link: What is Enterprise Mode? [Technet.Microsoft.COM]

[tonyyeb]

Correct me if I'm wrong but Enterprise Mode just sets the compatibility render mode for certain websites (e.g. render in IE9 compatibility mode)? If so then that won't work, tried changing the render version and it doesn't make a difference. Plus for one use in the default IE11 (Edge) view it works and for another it doesn't.

[6Foot2]

Correct me if I'm wrong but Enterprise Mode just sets the compatibility render mode for certain websites (e.g. render in IE9 compatibility mode)?..

 

It was just an idea. You did say that any were welcome.

[tonyyeb]

It was just an idea. You did say that any were welcome.

 

Haha yes I sure did, thanks! Going round the bend with this one, ruled out the PC, IE version, compatibility mode, proxy, Group Policy, Flash Version.... Must be a user permission / setting somewhere! But why does copying a user work for the copied user but not the source?!?! Crazy!

[dapaulio]

Uac?

Run gp wizard from a dc on that computer with the effected user. It will report all the group policies that have applied and the settings associated with those GP'S

Compare them to the working machine and you should be able to see if group policy as a cause

[tonyyeb]

Thanks for the suggestion but it is the same PC that works and doesn't work depending on the user so it isn't a PC GPO. And the two users in question reside in the same OU (and are a duplicate of each other) so not entirely sure how they could have different GPOs applied?

[free780]

Unless it's security filtering, delegation or wmi filters.

[tonyyeb]

Some good suggestions there guys which I'll try on Monday at work.... However just out of curiosity I tried my home Windows 10 Pro laptop, not joined to a domain or anything, just a regular PC. It does EXACTLY the same! Normal user website doesn't work, but do "run as administrator" for iexplore.exe and it works!!! How crazy! Very frustrating!!

[6Foot2]

Is the web address one that you can share so that we can see if we get the same effect/result?

[dapaulio]

Can you describe what you mean When you say the website doesn't work. Does it show parts but is not render correctly, or is it a blank screen, error 404 etc.

 

Is it an internal website? What happens if you trust the site or specify it as intranet.

 

Are you behind a proxy that may be Web filtering the other user.

 

If you do have a proxy try logging on as yourself but enter the other credentials that the website doesn't work in to manage network passwords. And vice versa. What is the result?

Edited February 7, 2016 by dapaulio

[tonyyeb]

Hi all

 

Thanks again for all the suggestions. I've produced a screen capture video to show what happens. The problem is related to us using Office 365 Video (Microsoft's corporate YouTube if you like) - we are embedding the video into Moodle (our VLE). What happens is the embedded video requires the user to login using their Office 365 credentials to watch it. If the video is embedded in Moodle, the login process appears to work but doesn't (see first part of the video below). I've uploaded a simple web page to a public webserver and that DOES work (32 seconds into the video below). So today's discovery is that we think the problem may be related to Internet Explorer Zones as Moodle is categorised as 'Local Intranet' and the public webserver is 'Internet'.

 

[tonyyeb]

Firstly a big thanks to all the suggestions and contributions. It turns out after a very long tour round pretty much everything we could establish (confused initially by it working for some users and not others) that Moodle needed to be put into the Trusted Sites list to get this to work for normal users.

 

Thanks again to everyone, thanks coming your way