Touch Keyboard Missing Using Embedded Lockdown Manager

Background info: We are using Windows Industry 8.1 Ent, with Embedded Lockdown Manager and Shell Launcher. Internet Explorer is the "shell" application we use the specific account, configured to re-launch if closed. The device is a large touch
screen device that usually has a USB keyboard attached, but does not in some use cases.
The problem is that there is no touch keyboard that comes up regardless if there is a physical keyboard plugged in. There are no device drivers missing and everything else functions great. I was hoping that Windows would recognize no physical keyboard and
bring up the touch keyboard when in a text field or any other type-able field like Windows Phone or tablets do. Am I missing something glaring, is the fact that I am using IE as the shell the problem?

I think the OSK is tied to Explorer shell.
This forum is for POSReady. WEI forum is here:
https://social.msdn.microsoft.com/Forums/en-US/home?forum=WEIndustry where you might get a clearer answer.
www.annabooks.com / www.seanliming.com / Book Author - Pro Guide to WE8S, Pro Guide to WES 7, Pro Guide to POS for .NET

Similar Messages

  • Can't reinstall Embedded Lockdown Manager in Windows 8.1 with KB3031044

    Embedded Lockdown Manager (kb2959936) is a build-in feature/update in Windows 8.1 with update 3 (the November 2014 full media refresh image), now MS remove it by
    KB3031044
    I want to reinstall ELM, BUT THE RESOLUTION SEEMS DIDN'T WORK, I can't reinstall ELM by apply KB2932354 or KB2959936
    And I run the updates clean-up command already
    DISM.exe /Online /Cleanup-Image /StartComponentCleanup /ResetBase
    so I can't uninstall KB303144 
    Maybe MS need release a refresh version of ELM?

    Update 3? I don't see a 3 version in MSDN. If you check Programs and Features - > Turn On or Off Windows Features, you should be able to enabled ELM.
    Also, ELM does come as a separate ISO file on MSDN: <label class="description" id="description3">Windows Embedded 8.1 Industry Pro ELM Update</label>
    Sean Liming - Book Author: Starter Guide SIM (WEI), Pro Guide to WE8S & WES 7, Pro Guide to POS for .NET - www.annabooks.com / www.seanliming.com

  • Monitoring PRI using Embedded Event Manager

    Hi,
    I am trying to use Embedded Event Manager to flag  when calls on a pri get above
    28 but its not working.  I found an OID which shows number of calls currently on
    the B Channels of a pri.  I dropped the threshold to two just to check it was
    functioning correctly.  Config below:
    event manager applet bchan-mon
    event snmp oid 1.3.6.1.4.1.9.10.19.1.1.11 get-type exact entry-op gt entry-val
    2 poll-interval 60
    action exceeded syslog priority critical msg "All Chanels in Use"
    I have done a debug and it says the OID is not found even though if i do a show
    snmp mib i see the OID.  Output below:
    Feb  9 08:35:58.097: fh_process_async: re=445EF694, timer_type=POLL
    Feb  9 08:35:58.097: snmp_entry_value_check: OID unavailable, value check
    skipped
    Feb  9 08:35:58.097: snmp_entry_value_check:Returning FALSE
    Feb  9 08:35:58.097: fh_process_async: update_t=0cron_tick: num_matches 0
    Has anyone successfullly used EEM to do this?
    Any help appreciated.
    Thanks
    Kev

    Hi Joe,
    I get this from an snmp walk:
    rh019654@c_nnm_u > snmpwalk lr2196 1.3.6.1.4.1.9.10.19.1.1.11
    cisco.ciscoExperiment.19.1.1.11.0 : Unsigned32: 0
    The device is a cisco 2851 and the IOS is C2800NM-SPSERVICESK9-M 12.4(18e).
    If i run a debug now after adding the 0 i dont get a OID error not found anymore but its still not flagging the message in the log when the amount of calls go above 2.  See below:
    Feb 10 09:43:17.774: fh_process_async: re=463448F0, timer_type=POLL
    Feb 10 09:43:17.774: snmp_value_uint_compare:op1=0 op2=2 ret=FALSE
    Feb 10 09:43:17.774: snmp_entry_value_check:Returning FALSE
    Feb 10 09:43:17.774: fh_process_async: update_t=0
    Thanks
    Kev

  • Keyboard misses letters when typing

    When I am typing on my keyboard that came with my computer, it misses letters.  I type on several other keyboards and they all work fine so I don't think it is my touch.  Had this for 3 months now and Best Buy refuses to take care of the problem for me.  Can anybody help me?

    Hello @BCTVK,
    I understand that you are having issues with your touch keyboard missing letters when typing on your HP  ENVY 23. I would be happy to assist you, but first I would encourage you to post your product number for your computer. I am linking an HP Support document below that will show you how to find your product number. As with this I can provide you with accurate information.
    How Do I Find My Model Number or Product Number?
    Please re-post with the requested information and I would be happy to provide you with assistance. Thank you for posting on the HP Forums. Have a great day!
    Please click the "Thumbs Up" on the bottom right of this post to say thank you if you appreciate the support I provide!
    Also be sure to mark my post as “Accept as Solution" if you feel my post solved your issue, it will help others who face the same challenge find the same solution.
    Dunidar
    I work on behalf of HP
    Find out a bit more about me by checking out my profile!
    "Customers don’t expect you to be perfect. They do expect you to fix things when they go wrong." ~ Donald Porter

  • HT201406 1st. Gen iPad question:  the touch keyboard does not appear when attempting to input data into data fields - this happens while using all apps, ex. Notes, Google, Pages, etc..

    1st. Gen iPad question:  the touch keyboard does not appear when attempting to input data into data fields - this happens while using all apps, ex. Notes, Google, Pages, etc.. The cursor prompt is present.  Tapping screen just brings up the option to: "Select   Select All   Paste."   I have rebbooted with no change. 
    Message was edited by: Jimfromutah
    The problem was my connected bluetooth keyboard.

    1st. Gen iPad question:  the touch keyboard does not appear when attempting to input data into data fields - this happens while using all apps, ex. Notes, Google, Pages, etc.. The cursor prompt is present.  Tapping screen just brings up the option to: "Select   Select All   Paste."   I have rebbooted with no change. 
    Message was edited by: Jimfromutah
    The problem was my connected bluetooth keyboard.

  • I need your help with a decision to use iPhoto.  I have been a PC user since the mid 1980's and more recently have used ACDSee to manage my photo images and Photoshop to edit them.  I have used ProShow Gold to create slideshows.  I am comfortable with my

    I need your help with a decision to use iPhoto.  I have been a PC user since the mid 1980’s and more recently have used ACDSee to manage my photo images and Photoshop to edit them.  I have used ProShow Gold to create slideshows.  I am comfortable with my own folder and file naming conventions. I currently have over 23,000 images of which around 60% are scans going back 75 years.  Since I keep a copy of the originals, the storage requirements for over 46,000 images is huge.  180GB plus.
    I now have a Macbook Pro and will add an iMac when the new models arrive.  For my photos, I want to stay with Photoshop which also gives me the Bridge.  The only obvious reason to use iPhoto is to take advantage of Faces and the link to iMovie to make slideshows.  What am I missing and is using iPhoto worth the effort?
    If I choose to use iPhoto, I am not certain whether I need to load the originals and the edited versions. I suspect that just the latter is sufficient.  If I set PhotoShop as my external editor, I presume that iPhoto will keep track of all changes moving forward.  However, over 23,000 images in iPhoto makes me twitchy and they are appear hidden within iPhoto.  In the past, I have experienced syncing problems with, and database errors in, large databases.  If I break up the images into a number of projects, I loose the value of Faces reaching back over time.
    Some guidance and insight would be appreciated.  I have a number of Faces questions which I will save for later. 

    Bridge and Photoshop is a common file-based management system. (Not sure why you'd have used ACDSEE as well as Bridge.) In any event, it's on the way out. You won't be using it in 5 years time.
    Up to this the lack of processing power on your computer left no choice but to organise this way. But file based organisation is as sensible as organising a Shoe Warehouse based on the colour of the boxes. It's also ultimately data-destructive.
    Modern systems are Database driven. Files are managed, Images imported, virtual versions, lossless processing and unlimited editing are the way forward.
    For a Photographer Photoshop is overkill. It's an enormously powerful app, a staple of the Graphic Designers' trade. A Photographer uses maybe 15% to 20% of its capability.
    Apps like iPhoto, Lightroom, Aperture are the way forward - for photographers. There's the 20% of Photoshop that shooters actually use, coupled with management and lossless processing. Pop over to the Aperture or Lightroom forums (on the Adobe site) and one comment shows up over and over again... "Since I started using Aperture/ Lightroom I hardly ever use Photoshop any more..." and if there is a job that these apps can do, then the (much) cheaper Elements will do it.
    The change is not easy though, especially if you have a long-standing and well thought out filing system of your own. The first thing I would strongly advise is that you experiment before making any decisions. So I would create a Library, import 300 or 400 shots and play. You might as well do this in iPhoto to begin with - though if you’re a serious hobbyist or a Pro then you'll find yourself looking further afield pretty soon. iPhoto is good for the family snapper, taking shots at birthdays and sharing them with friends and family.
    Next: If you're going to successfully use these apps you need to make a leap: Your files are not your Photos.
    The illustration I use is as follows: In my iTunes Library I have a file called 'Let_it_Be_The_Beatles.mp3'. So what is that, exactly? It's not the song. The Beatles never wrote an mp3. They wrote a tune and lyrics. They recorded it and a copy of that recording is stored in the mp3 file. So the file is just a container for the recording. That container is designed in a specific way attuned to the characteristics and requirements of the data. Hence, mp3.
    Similarly, that Jpeg is not your photo, it's a container designed to hold that kind of data. iPhoto is all about the data and not about the container. So, regardless of where you choose to store the file, iPhoto will manage the photo, edit the photo, add metadata to the Photo but never touch the file. If you choose to export - unless you specifically choose to export the original - iPhoto will export the Photo into a new container - a new file containing the photo.
    When you process an image in iPhoto the file is never touched, instead your decisions are recorded in the database. When you view the image then the Master is presented with these decisions applied to it. That's why it's lossless. You can also have multiple versions and waste no disk space because they are all just listings in the database.
    These apps replace the Finder (File Browser) for managing your Photos. They become the Go-To app for anything to do with your photos. They replace Bridge too as they become a front-end for Photoshop.
    So, want to use a photo for something - Export it. Choose the format, size and quality you want and there it is. If you're emailing, uploading to websites then these apps have a "good enough for most things" version called the Preview - this will be missing some metadata.
    So it's a big change from a file-based to Photo-based management, from editing files to processing Photos and it's worth thinking it through before you decide.

  • Why doesn't LR let us use embedded/standard previews (at least optionally)?

    I bought LR but cannot commit to using it mainly because it is too slow importing and browsing previews but also because LR's previews are worse than the embedded previews in RAW images or JPGs as displayed by other standard programs like Photo Mechanic, Breeze Browser or ADCSee.
    I shoot Canon RAW (then convert the CR2s to DNG) and occasionally JPG (1DMkII) but I get hundreds of images from friends and family, mostly JPG, taken with many different cameras. The vast majority of these pictures look terrific in PM, BB or ACDSee, etc but they look significantly worse in LR. LR renders its own previews from RAW files instead of using the excellent embedded preview that's already there and LR also somehow changes the JPG preview so that it looks bland and off color in comparison to the same image viewed in PM, ACDC or BB on the same computer. I assume LR's color management or color space is what changes the previews (and thumbs) so they look different (bad) in LR than they look in other standard programs.
    Why can't we at least have the option of using embedded previews in LR and display them normally like PM, BB and ACDC. Then LR would be fast (like PM, BB and ACDC) importing and displaying previews and we would not have to fiddle with exposure or color adjustments to get decent previews. Yes, I can get LR to just about match (sometimes exceed) the image quality of other programs but only with massive fiddling with individual images (the camera calibration controls are not sufficient by themselves) and that is a massive pain in the butt.
    I, of course, have read many posts about color management. But I refuse to buy expensive color calibration tools and go through that expense and aggravation just to accommodate LR. My pictures already look great in PM, BB, ACDSee and web browsers and on other non-color managed computers. I think LR should be able to be operated in a standard manner so it is consistent with other standard software. The fact is that the vast majority of all amateur photographers, even pretty serious folks, do not hassle with color management because standard software displays very nice images already.
    Another point. Some folks like to use Canon or Nikon or other RAW converters instead of Adobe's (for all or some images). If they develop their RAWS in DPP or Capture NX, etc, then import the images into LR, LR renders its own previews which disregard the work done in the 3rd party converter. This is pretty annoying and virtually prevents such folks from using LR. Other programs that use the embedded previews display the adjustments made in 3rd party RAW converters very nicely.
    Regards
    Bill Wood

    Thanks for the replies. Sorry I could not respond sooner.
    Nobody addressed my question. Why is there no option in LR to use embedded previews in RAW files and why is there no option to display JPG previews in a standard color space, presumably sRGB, like other standard software - Photo Mechanic, Breeze Browser, ACDSee, etc, etc?
    LR's insistence on rendering previews from RAW files makes the program too slow and it forces users to diddle with settings to get previews that look normal - meaning match what 99% of the rest of the world sees on normal non-color managed computer screens. Folks who want rendered previews and non-standard color space (ProPhoto) and all the rest of us who just want standard previews by default should both be accommodated. Just give us the option to choose.
    I just downloaded IDImager, a competing database type DAM program, for a trial. It does give users the option to use embedded previews for fast import and display or it will render previews from RAW if you choose that option. So it can be done and an embedded preview choice makes the program much faster and easier for most people to use.
    Just a few comments about the replies:
    Lee Jay said LR doesn't use embedded previews because:
    "Correct...that's because it's a RAW converter and must display what you'd get from a RAW conversion."
    Well, with respect, I cannot agree. First, LR is not just a RAW converter, its much more. If it was that limited, I never would have bought it and neither would anybody else. I already have ACR in Photoshop. Second, it is not mandatory that LR render previews from RAWs. It could optionally use embedded previews if that option was offered. Why do some folks lobby for lack of flexibility? I bet even you naysayers would use embedded previews sometimes, like when you want speed to show pictures to your family, friends and don't need to fester over image adjustments.
    Lee Jay also said regarding the difference between my JPG previews in LR vs. other standard software:
    "That is likely the fault of your monitor profile, which LR uses and the other programs (probably) don't. It could also be caused by you having "automatically apply auto tone" set, or by applying a preset on import."
    No, it LR's fault, period. Every other program I have ever used displays my pictures just fine (Photo Mechanic, Breeze Browser, ADCSee, etc, etc, even Windows free Picture and Fax Viewer works fine. Yes, I can diddle with LR's settings and get nice previews but I don't want to diddle with every image. And it ain't my monitor profile - I can delete it or change it and the issue remains. LR makes different previews from standard software because it renders previews from RAW data and uses a non-standard color space. Camera calibration (or presets) is not a reasonable solution for everybody. I have several cameras, my kids have many different cameras, friends have different cameras and I get images from all these people - so I have a ton of very different images in different lighting and I am not about to setup numerous different calibrations or presets to see previews in LR when I get excellent previews from other standard software that uses embedded previews and produces great previews with no work whatsoever. All I am suggesting is the option to use embedded previews and a standard color space. Again I must ask why do some folks argue for lack of flexibility?
    John McWilliams said about LR's power:
    "The neat thing is you can make the image look just about anyway you want without loss of quality."
    I could not agree more - LR is a good program! But, I don't want to diddle with every image. Most of them are fine, in fact, terrific right out of the camera. I just want to see them faster and I want them to match what other people see on standard non-color managed computers. If PM, BB, ACDSee and others can do it, so can LR.
    David Edwards said:
    "The images that I want to see in the Library section are RAW images with all the adjustments I have made to them and certainly not the embedded JPGs. If I wanted to see those I would have shot JPG."
    This is fine and no doubt makes perfect sense for David's workflow. But, why advocate against an option to use embedded previews for those who would find that useful? I too shoot only RAW with my DSLR cameras because I want the best images and the ability to use all of LR's (or DPPs) conversion powers when appropriate. But, as I said above, the vast majority of my embedded previews are good enough right out of the camera as viewed in PM, BB or ACDSee so I don't need to make any adjustments. :) Only LR creates a problem my rendering less than desirable previews by default. I also want to note that embedded previews do, in fact, display all changes made in LR and I cannot tell any difference in quality on screen between embedded previews and rendered previews when I adjust the LR version to match the default embedded preview and compare them side-by-side in LR and PM, for example.
    David also asked:
    "Do you need a RAW converter or an application to display images?"
    Both. Preferably in the same program. LR is supposed to be an all-in-one solution. It certainly will be when it gets more mature, I hope. I am a amateur so my main need is to see my pictures. I like them and enjoy them but LR is too slow importing and displaying thumbs and previews in Library mode and its previews usually need adjustment. So right now I am forced to use PM, BB or ACDSee all of which are way faster importing and browsing images and they use embedded previews that are fine, even excellent, by default.
    I think Adobe is missing out on a significant number of potential users because LR does not provide the options I am requesting. I am certainly not the only person who wants faster importing and browsing and previews that look good by default. And, as I mentioned before, folks who use other RAW converters are also excluded since they cannot see the changes they make before importing images into LR because LR will not display embedded previews.
    Regards
    Bill Wood

  • Firefox Flash Crashes on Windows 8 Tablet (Surface Pro) when onboard touch keyboard is activated or when screen orientation is changed

    Whenever I have firefox open and I need to type something using the onboard touch keyboard, the moment I activate the keyboard, Firefox freezes. I then receive a prompt saying Flash has stopped working. However, I have updated shockwave flash to the most recent one. Also, I noticed at intermittent times, whenever I change the orientation (portrait --> landscape) on my tablet, I get the same issue as above.
    I am not sure if this is a Flash issue, or some sort of integration problem with firefox and the windows8 tablet features.

    I have tried that, but did not work. I switched over to Nightly which is still in beta, and it is much better. But still some flashsites like youtube still crash every so often....
    Anyone have anything for this?

  • Not able to access database from a remote machine using SQL Server Management Studio

    Hi,
    I have a DB_BOX with SQL Server 2008 R2 installed. I can access the databases on the local machine using SQL Server Management Studio but it is not accessible from other machines, though the machines are in same domain.
    I have remote enabled on SQL Server box, TCP enabled, firewall off. I checked with IP Address too, all SQL Server services are running.
    The SQL Server log shows the message
    The requested service has been stopped or disabled and is unavailable at this time. The connection has been closed.
    I get the below message in SSMS from remote machine.
    Details of error message are
    ===================================
    Cannot connect to DB_BOX.
    ===================================
    A connection was successfully established with the server, but then an error occurred during the login process. (provider: TCP Provider, error: 0 - The specified network name is no longer available.) (.Net SqlClient Data Provider)
    For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&EvtSrc=MSSQLServer&EvtID=64&LinkId=20476
    Server Name: DB_BOX
    Error Number: 64
    Severity: 20
    State: 0
    Program Location:
       at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
       at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
       at System.Data.SqlClient.TdsParserStateObject.ReadSniError(TdsParserStateObject stateObj, UInt32 error)
       at System.Data.SqlClient.TdsParserStateObject.ReadSni(DbAsyncResult asyncResult, TdsParserStateObject stateObj)
       at System.Data.SqlClient.TdsParserStateObject.ReadNetworkPacket()
       at System.Data.SqlClient.TdsParserStateObject.ReadBuffer()
       at System.Data.SqlClient.TdsParserStateObject.ReadByte()
       at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
       at System.Data.SqlClient.SqlInternalConnectionTds.CompleteLogin(Boolean enlistOK)
       at System.Data.SqlClient.SqlInternalConnectionTds.AttemptOneLogin(ServerInfo serverInfo, String newPassword, Boolean ignoreSniOpenTimeout, Int64 timerExpire, SqlConnection owningObject)
       at System.Data.SqlClient.SqlInternalConnectionTds.LoginNoFailover(String host, String newPassword, Boolean redirectedUserInstance, SqlConnection owningObject, SqlConnectionString connectionOptions, Int64 timerStart)
       at System.Data.SqlClient.SqlInternalConnectionTds.OpenLoginEnlist(SqlConnection owningObject, SqlConnectionString connectionOptions, String newPassword, Boolean redirectedUserInstance)
       at System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, Object providerInfo, String newPassword, SqlConnection owningObject, Boolean redirectedUserInstance)
       at System.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection)
       at System.Data.ProviderBase.DbConnectionFactory.CreateNonPooledConnection(DbConnection owningConnection, DbConnectionPoolGroup poolGroup)
       at System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection)
       at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)
       at System.Data.SqlClient.SqlConnection.Open()
       at Microsoft.SqlServer.Management.SqlStudio.Explorer.ObjectExplorerService.ValidateConnection(UIConnectionInfo ci, IServerType server)
       at Microsoft.SqlServer.Management.UI.ConnectionDlg.Connector.ConnectionThreadUser()

    Sorry, missed the message from the errorlog in the original post. You shouldn't have included that big .Net dump that hid the important facts. :-)
    My first Google attempt on that message (which I have never seen before) suggests that the TCP Enpoint is stopped, so try this:
    ALTER ENDPOINT [TSQL Default TCP]
    STATE=STARTED;
    Erland Sommarskog, SQL Server MVP, [email protected]
    This solves the problem. Thanks...

  • I bought a 5th Gen Touch. I use iTunes 12 on two computers. One computer allows me to drag and drop. The other does not.The one that allows it has problems. Any idea as to why I can drag and drop on one and not the other. Both are authorized.

    I bought a 5th Gen Touch. I use iTunes 12 on my two computers. I first connected the Touch to my desktop and it allows me to drag and drop mp3 files from my old Classic, which is backed up to a directory. Unfortunately, that computer has gone down before I got a chance to fill the Touch. I have the files on another computer but when I connect the Touch to it, it doesn't allow me to drag and drop the files. I have iCloud set on both systems and I have manual management check marked. I'm not understanding why it allows drag and drop on one PC and not the other when they are both set the same way. My question? What do I need to do to be able to drag and drop in iTunes 12? I didn't do anything special on the computer that allows it so I am at a loss.
    Thank you!

    Oh, also want to add that the PC I'm currently using is:
    Windows Vista Home Premium Service Pack 2
    My other PC was:
    Windows 7 Ultimate
    My MacBook is:
    Max OSX 10.5.something (the last update available for it. .8 maybe? haha)
    Not sure if this stuff is important, but I thought I'd add it.

  • Can't use Adobe Extension Manager to Install Photoshop plug-in

    I am trying to install a plug-in from PSKiss to Photoshop CS5 (version 12.0.4). I'm using Adobe Extension Manager CS5.5, and I'm running Windows 7 on my laptop.
    Although I'm following up with PSKiss to see if there's a problem at this end, I also see an issue with Adobe Extension Manager. When I open it, the Install button is grayed-out. I can see neither of the plug-ins I've already installed in Photoshop, nor can I install anything new. I am running Adobe Extension Manager as Administrator—and I've tried every way I can think of to do that.
    Also, yes, I'm using my laptop with an Administrator account.
    What's going on? What am I missing? Please help if you can. Thanks!

    Hi Lisa, and welcome to the forum.
    I don't know if the Extension Manager release notes would help you?
    http://helpx.adobe.com/creative-suite/release-note/extension-manager-cs5-release-notes.htm l
    There is a link to a stand alone EM at
    http://www.adobe.com/exchange/em_download/
    And a list of EM related help artiicles at:
    http://www.adobe.com/cfusion/search/index.cfm?loc=en_us&term=extension%20manager&cat=suppo rt

  • Using the Security Manager to restrict access to a single package

    After reading up on the Security Manager, the package.access property and the use of the [accessClassInPackage RuntimePermission|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html#RuntimePermission] , it seemed to me that it would possible to set up the following: I have a security-sensitive code base packaged in a jar, and I want to make sure that only one client code base that I specify is permitted to access it. The idea here is to prevent malicious code from executing anything in the sensitive code base; the sensitive code is only accessible to one client that I name in a security policy file. Perhaps rather foolishly, I advised a client to consider this before testing out a sample myself, because much to my surprise, it appears to me that it isn't possible to get the Security Manager to do this at all. Am I missing something? I'm a bit startled by this conclusion -- it seems like such an obvious use for the Security Manager, I'm hard-pressed to be believe that it can't be done, and more inclined to suspect that I'm going about it wrong.
    Here's what I thought I could do: set up the package.access property so that it denies access to any package; then in the policy file, grant the RuntimePermission/accessClassInPackage to the client code base that is permitted to access the sensitive code.
    Of course, you wouldn't want the package.access property to exclude all packages in the global java.security file, because then no code could be accessed at all. It would be necessary to use the trick of resetting the package.access property within the code, as [illustrated in the secure coding guidelines|http://java.sun.com/security/seccodeguide.html#1-1a] .
    But the problem lies in the idea of "use the package.access property to deny access to +any+ package". There doesn't seem to be any way to use wildcards or the like with the property -- it has to specifically name packages (or package prefixes) to which access is forbidden. It wouldn't do to try to name the packages to which I'm trying to prevent access, since we're trying to prevent access from malicious code -- the attacker could just choose package names that aren't on the list. I'd really need to say that access is denied to all packages, except for those in the permitted code base, but the security mechanisms for package access don't seem to allow that.
    Moreover, the trick of changing the value of package.access can't be done within the client code -- otherwise, the attacker client would just set the property to his own purposes. But it can't really be done within the sensitive package either, because the whole idea is to prevent access to that package, and by the time it's busy setting the property, it's already too late, because the package has to have been accessed by a client to get there at all.
    It seems to me that this a symptom of something I've never really understood about the design of the Security Manager -- you can grant permissions to specific code bases, but you can't revoke permissions from specific code bases, let alone all code bases. What I want to do here is grant access permission to one specific code base and revoke it from all others. There doesn't seem to be any way to express that with the mechanisms of the Security Manager.
    The more I look at it, the more it seems that there's just no way to use the Security Manager this way -- set up package access so that a specific code base can only be accessed by one specific client code base. There are surely other ways to get the effect that I'm looking for, but as far as I can tell, none of them involve restricting package access (for example: define a custom permission, grant it only to the permitted client. and check against that permission within the sensitive code base; meaning that the sensitive code has to be accessible to anyone in the first place). This conclusion really surprises me (not to mention my bit of embarrassment with the client); wouldn't this be precisely the sort of thing the Security Manager ought to be good for?

    You're looking at this back to front. The security policy file is there for the client to decide how much access he is going to give this application, not for to application to restrict who can use it. If you want to control what used to be called 'state orientation' you can do that directly by looking down the stack trace inside your code.

  • Searching for Easy DMS documents using embedded search

    Dear Experts,
    we are using easy dms to manage documents. As far as I know it should be possible to index these documents using TREX.
    -it is possible to perform a search for these documents using Embedded Search an get the search results as XML (a documentation would be very helpful)?
    -how can the security be taken into account? Is there a method like AUTHORITHY_CHECK by SeS to perform security check?
    thanks a lot for your help
    kind regards
    Nicolai

    I found that authorization checks can be performed using the following authorization objects:
    -Authorization Object C_DRAW_TCD (Activities for Documents)
    -Authorization Object C_DRAW_TCS (Status Dependent Authorization)
    -Authorization Object C_DRAW_STA (Document Status)
    -Authorization Object C_DRAW_BGR (Authorization Group)
    -Authorization Object C_DRAW_DOK (Document Access)
    -Authorization Object C_DRAD_OBJ (Object Link)
    I could not find any information regarding my first question

  • Windows 8 remote desktop touch keyboard problem

    I have been playing with the HP Elitepad Tablets at work for some users, who need to connect to terminal servers, or their PC. The issue that they have is that the standard RDC does not support the touch keyboard (different then the onscreen keyboard or
    virtual keyboard). When they connect into the remote session they are able to pull up the touch keyboard, but by a series of maneuvers that I don't expect anyone to have to fight with (swipe in the charms, tap settings, tap keyboard, and then select "Touch
    keyboard and handwriting panel". Then they are allowed to type into a field but if the keyboard needs to close so they can actually view the screen then this has to be done again). I have downloaded the Remote Desktop app from the Windows Store and have
    used this and it works well, you can tap the PC you're connected to at the top and select the keyboard, but not every user has a Microsoft Account, and I am not in the position to have them sign up for one just to get one app not to mention issues of using
    their personal email for their work PC.
    Is there a way to get the Remote Desktop "App" from the Windows Store without having to sign in with a Microsoft account?
    Is there a way to add in Remote Apps to the Remote Desktop app for easy switching between RPDs? (Swiping from left to right or selecting the dropdown from the Remote Desktop app and switching between RDCs)
    Any help would be appreciated. Again this is only for a few devices, we currently have less then 10 of these tablets on our domain.

    Any error messages prompted or shown under Event Viewer? Please paste related information here so we can better find the cause.
    Meanwhile, you can refer to the KB below, check if it can help you
    Remote Desktop disconnected or can’t connect to remote computer or to Remote Desktop server (Terminal Server) that is running Windows Server 2008 R2
    http://support.microsoft.com/kb/2477176/en-us
    More detailed information would be very helpful
    Regards
    Yolanda
    TechNet Community Support

  • Touch keyboard disappears 3 times each reboot or sleep

    Hey I have a Spectre x360 doing something weird.  Every time I reboot or wake the laptop from sleep (well at least after it's not been used for a while)...When i tap the box to enter my password in touch mode to log into windows the touch keyboard dissapears 3x.   I made a video of it:https://www.dropbox.com/s/80ks0vbh6jpt3po/2015-07-18%2020.23.23.mp4?dl=0 It's irritating mostly, but It's weird behavior and I cant figure out why.  HP support isnt that useful, because they cant view videos and it wont show up while the remote session is happening.  Any help would be appreciated.  Thx!

    See if doing this helps
    For Mac computer
    1. Open the disk utility, hope your iPod appears there (left hand side), highlight it
    2. Go to Tab “Partition”, click either “Delete” or “Partition”, if fails, skip this step and go to 3
    3. Go to Tab “Erase” , choose Volume Format as “MAC OS Extended (Journaled), and click Erase, again if fails, skip it and go to 4
    4. Same as step 3, but open the “Security Options....” and choose “Zero Out Data” before click Erase. It will take 1 to 2 hours to complete.
    5. Eject your iPod and do a Reset
    6. Open the iTunes 7 and click “Restore”

Maybe you are looking for

  • Why can't i login on my mac book pro after restoring a backup from a time machine?

    i had the apple store restore my macbook pro, late 2008 edition, from my external drive (time machine backup) after an unknown failure and now my passwords aren't working for any of my profiles. why? how can i get around it?

  • ALE RBDMIDOC problem

    Hi Experts, I am getting error SYSTEM_IMODE_TOO_LARGE. The  program takes the change pointers and creates an IDOC. Only way now is to process change pointers mannually to reduce the number of change pointers for this program. Can you suggest any way

  • Can I use the mouse scroll wheel for zooming the timeline?

    Howdy... As a recent convert from Vegas, one of the best features that I miss is using the mouse scroll wheel to zoom into and out of the timeline.. Anyone know a way I can set this up in FCP6? Thanks... -Ben

  • Router Model 2801 with fxs/DID and FXO card.

    Greetings.I am Yeoh here I just configured DID direct inward dial on the fxs port.RJ11 connection to pbx. dunno wheter it will function or not. should i configure the ring and voltage for the connection to run? Here i have router 2800 . Not really su

  • EVO:RAIL and VSAN

    Are there VSAN benchmarks on EVO:RAIL compared with traditional server based VSAN?