Access denied with Internet Explorer

about a year ago by Andre Christ

Some users experienced the issue, that the login to our new version "Pathfinder" was not possible with Internet Explorer, mainly with IE 11. They stuck at the loading page. When opening the Developer Tools the error message stated "SCRIPT5: Access is denied.". This error is not related to a specific version of IE, but to a wrong underlying folder setting. This prevents the access to the LocalStorage, a place where browsers can store data which is a very common feature highly used by many websites.

After working through many other error reports at Microsoft, we identified the cause. It turned out to be a problem with the settings on the C:\Users\username\Appdata\LocalLow folder in the user profile. Each folder on your computer has an integrity setting. The integrity setting on the AppData\LocalLow folder (and its subfolders) in each user's profile is supposed to be set to "Low" (hence the name). In our case, the integrity level was not set correctly on this folder. This article at Stackoverflow was especially helpful for also getting insights on how to reproduce this.

You can try the following JavaScript example at http://jsfiddle.net/xFtQR/ to see if your IE is affected. If everything is ok, then you will find output shown in the main window. Otherwise the page just shows a blank space and the error message 'Access denied' when you inspect the Developer Tools.

The problem can be fixed by executing the following command (open cmd):

icacls %userprofile%\Appdata\LocalLow /t /setintegritylevel (OI)(CI)L

In order to reproduce the issue, the following command needs to be executed (open cmd, as Administrator). The H sets the integrity mode to "high". Please be aware, that in the Internet Explorer Advanced settings, the "Enable DOM storage" needs to be switched on to reproduce.

icacls %userprofile%\Appdata\LocalLow /t /setintegritylevel (OI)(CI)H

We are aware that updating many clients is a task with high effort. Therefore we have worked around the issue in the latest version of LeanIX (3.9.111), by adding a proxy function which will only show an error message in the Developer tools Unable to get lxRemoteDebug from local storage, IE specific setting but will allow you to work normally with LeanIX.

Nevertheless, we recommend you approach your internal teams responsible for your Notebooks and Desktops in order to fix the issue as many other websites will be affected which make use of the LocalStorage feature in the browser.