IE6 to IE8 upgrade breaks Host Checker

[ibwalkn_]

We are doing an IE6 to IE8 upgrade at our enterprise and some users are experiencing an immediate message after logging onto our SSL RAS. Instead of Host Checker loading, they are immediately presented with a you are not allowed to log in message. It seems that Host Checker is not running and they are not able to be assigned to any roles.

The workaround is to go to the browser and delete cookies, delete temporary internet files, delete the Juniper object, deinstall any Juniper software, download and install the latest Sun Java and try again. That usually takes care of it. However, in some situations, it is necessary to replace the user's profile to get them working again.

I'm looking for advice on two topics:

1) What is the best approach to resolve the issue?

2) What is the best way to avoid the issue? Should we de-install any Juniper software before the upgrade from IE6 to IE8?

[zanyterp_]

I know this is late; I hope users are seeing success at this time.

How many users are/were/did experience this? It is not expected to fail.

There are a couple things to be wary of with the upgrade:

1) IE 8 includes a memory protection module that prevents Host Checker from running (DEP); generally this results in a crash rather than an immediate failure

2) If ActiveX or Java are not allowed/installed, Host Checker will fail

3) If the user does not allow the ActiveX control to install (IE gives a warning asking if the install should be allowed; IE remembers this decision permanently. If the user denies access, then it is permanently denied until & unless the cookies are cleared). <--this is the most common issue i have seen

4) If the user ever said "no" to the prompt to allow the software to run from the IVE<-- this is another popular option I have seen cause failure

For your specific questions:

1) What is the best approach to resolve the issue?

>>>[z]clear browser cache & cookies; make sure there is no cookie that IE has set to deny Host Checker. Make sure users are admins or the Juniper Installer service is installed.

2) What is the best way to avoid the issue? Should we de-install any Juniper software before the upgrade from IE6 to IE8?_

>>>[z]You shouldn't need to uninstall any software in association with the upgrade. This is the only time I have heard of something similar, I don't have any ideas for the failure to offer for avoidance. A JTAC case would be needed.