NC 7.1.1975 won't run for non-priv user...

[A_batson_]

I install initially by double-clicking NCInst.exe, and it installs OK while logged in as a priv'ed user. Then logout, then back in as a non-priv user, and try to auth by dbl-clicking on the NetworkConnect application (not using browser)

It takes several MINUTES for the java to start and then a couple more

minutes for the java installer to pop-up. and then I get this text below. Are there any tips/tricks on getting this to run for a non-prived user? NOTE: this is on winXP. Running as a non-prived user under W7 works like a charm. Same result on Firefox and IE. Website is in 'Trusted' group on IE, which enables use of Java and ActiveX. Otherwise, client OS in perfect working order.

The message that comes up after many minutes:

In order to continue the operation you need to install a setup client. Please click here to install setup package. You must enable either ActiveX or Java to run the downloaded setup client.

Once the setup client is installed, please click here to continue.

Please click here to login to the realms without hostChecker.

If you do not want to proceed, pleas click here to go back.

[zanyterp_]

You need to install JuniperSetupClient as an admin in order for the non-admin users to complete the install activities

[A_batson_]

Thanks for responding - the only thing I've manually installed, is "NCInst.exe" for 32-bit WinXP. The JuniperSetupClient is installed automatically (it's downloaded from the SSL-VPN in real-time when logging in for the first time)? We have no trouble with W7, this is only with WinXP. How do I get ahold of 'JuniperSetupClient.exe'?

Is it known that winXP people need to manually install this item, where W7 people do not?

We have a FIPS-compliant unit -- the following two apps are auto-installed upon first auth (on a 64-bit test system we were using)

neoNCSetup64.exe

admin_neoFIPSSetup_7.1.0.19747.exe

[A_batson_]

Here's a snippit from the debug log on the client. What do we think this means?

00205,09 2012/06/22 13:23:01.496 1 xxxxx JuniperExt.exe JuniperSetupExt p5720 t11CC dsVerifyHelper.cpp:184 - 'DSVerifyHelper::verify()' Enter: C:\DOCUME~1\xxxxxx\LOCALS~1\Temp\JuniperSetupClientInstaller.exe

00256,09 2012/06/22 13:23:01.528 1 xxxxxx JuniperExt.exe JuniperSetupExt p5720 t11CC dsVerifyHelper.cpp:184 - 'DSVerifyHelper::verify()' C:\DOCUME~1\xxxxx\LOCALS~1\Temp\JuniperSetupClientInstaller.exe certificate signed by Juniper Networks, Inc. and verified

00136,09 2012/06/22 13:23:01.528 1 xxxx JuniperExt.exe JuniperSetupExt p5720 t11CC dsVerifyHelper.cpp:184 - 'DSVerifyHelper::verify()' Exit

00250,09 2012/06/22 13:23:01.528 3 xxxxx JuniperExt.exe JuniperSetupExt p5720 t11CC JuniperSetupUtils.cpp:450 - 'dsLaunchApplication()' Launch Application: 'C:\DOCUME~1\xxxxxxx\LOCALS~1\Temp\JuniperSetupClientInstaller.exe /S', wait = 1, impersonate = 0

00293,09 2012/06/22 13:23:01.528 3 xxxx JuniperExt.exe JuniperSetupExt p5720 t11CC JuniperSetupUtils.cpp:234 - 'dsCreateProcess()' CreateProcess: 'C:\DOCUME~1\xxxx\LOCALS~1\Temp\JuniperSetupClientInstaller.exe "C:\DOCUME~1\xxxxxxxx\LOCALS~1\Temp\JuniperSetupClientInstaller.exe" /S', wait = 1

00154,09 2012/06/22 13:23:01.684 0 xxxxx JuniperExt.exe JuniperSetupExt p5720 t11CC JuniperSetupUtils.cpp:248 - 'dsCreateProcess()' Wait for process to end...

00133,09 2012/06/22 13:23:01.731 3 xxxx JuniperExt.exe JuniperSetupExt p5720 t11CC JuniperSetupUtils.cpp:256 - 'dsCreateProcess()' Ended

00147,09 2012/06/22 13:23:01.731 3 xxxx JuniperExt.exe JuniperSetupExt p5720 t11CC JuniperSetupUtils.cpp:489 - 'dsLaunchApplication()' Ended: return 1

00158,09 2012/06/22 13:23:01.840 3 xxxxx JuniperExt.exe JuniperSetupExt p5720 t11CC JuniperSetupExt.cpp:335 - 'DSSetupClientHelperExt::installSetupClient()' ended

00162,09 2012/06/22 13:23:01.840 3 xxxx JuniperExt.exe JuniperSetupExt p5720 t11CC dsSetupClientHelper.cpp:248 - 'DSSetupClientHelper::waitForSetupClient()' starting

00290,09 2012/06/22 13:24:35.468 0 xxxxxx JuniperExt.exe JuniperSetupExt p5720 t11CC dsSetupClientHelper.cpp:265 - 'DSSetupClientHelper::waitForSetupClient()' ERROR: C:\Documents and Settings\xxxxx\Application Data\Juniper Networks\Setup Client\JuniperSetupClient.ini not found after download

00170,09 2012/06/22 13:24:35.468 1 xxxxx JuniperExt.exe JuniperSetupExt p5720 t11CC JuniperSetupExt.cpp:242 - 'DSSetupClientHelperExt::download()' waitForSetupClient() failed

00159,09 2012/06/22 13:24:35.468 1 xxxxxx JuniperExt.exe JuniperSetupExt p5720 t11CC JuniperSetupExt.cpp:370 - 'WinMain()' checkInstallation() failed, exit with -1.

[jayLaiz_]

can you try logging in to that same machine as a privilged user and install the juniper installer service exe package that can be downloaded from the SA admin UI under Maintenance--->system-->installers and then log in as a non privileged user and try

Regards,

Jay

[zanyterp_]

sorry, typo; that should have been JuniperInstallerService, as Jai pointed out.

Yes, you are correct that the setup client is delivered automatically when users login.

from the log snippet, it looks like the setup client is not being allowed to downloasd due to external policies or it is timing out. how many setup clients do you have in "add/remove programs"?

[A_batson_]

I got some meaningful results in testing last nite on a machine that had no other Juniper clients present. This is what I did on an XP system last nite:

1.)Logged into Windows as admin user

2.) Executed NCInst.exe. Installed successfully.

3.) While still logged into Windows as an admin user, logged all the way into the SSL-VPN. Clicked "yes" and "Always" at the appropriate times to make sure everything executed & installed during the login process.

4.)Logged out of Windows as the admin uesr, and logged in as the non-priv user.

5.) Was able to log all the way into the SSL-VPN with no errors at all.

The trick: NCInst.exe is NOT the only item that needs to be installed, in order to log into SSL-VPN. You must be logged in as admin in order for ALL those items to install. Therefore, you must log all the way into the SSL-VPN while logged into Windows as the admin user. Only then, will the non-priv user work. We'll test this on other workstations; I bet that was the issue.

[zanyterp_]

That is correct; thank you for sharing your success.