How to use openvpn with android - Android Q&A, Help & Troubleshooting

I was a bit confused about how to use OpenVPN on an Android device because there was so little information around. I thought I'd post this to make it easy for others. It turn out to be very simple. I have my Android phone (Note 2, Jellybean) rooted and Busybox installed, but neither is necessary.
The following steps relate to using an Android device with a commercial vpn service (like an anonymizing service among others), but this should help clarify in other situations too.
Step 1: download the OpenVPN config files from your vpn provider.
Step 2: download, install and start "OpenVPN for Android by Arne Schwabe" (O4A) (get it from any android app source, it's free, but donation to the author is optional and its a great app).
Step 3: on the "VPN Profiles" page of O4A, use the folder icon upper right to browse to the .ovpn config file for a server, select, and save it on the following page. The server name will appear on the Profiles page.
Note: Sometimes the server config files include a .p12 file which O4A will want to import, then require a password to decrypt...just uncheck that file (upper left) before saving; later O4A will ask for a password, just leave it blank and hit "OK", it will connect just fine (at least with my vpn provider).
Step 4: open the settings for the server you just imported (icon to the right of the server name), navigate to the "Basic" page, and enter your username and password at the bottom of the page (if your provider uses the u/p type connection). YOU ARE DONE (but, you will need to repeat this for each server you want to use).
Step 5: tap on the server name on the "Profiles" page, O4A will open the log file and you will see it going through the steps of the connection process in both the log and the notification bar . When it's finished successfully, you'll see "connected". You can check the connection in the log file. Also depending on your device the connection will show in the notification bar for as long as its connected. You can disconnect by tapping the notification.
The correct configuration settings for OpenVPN are usually included in the .ovpn file, so you likely won't need to change any config setting in O4A. However, you can add the line "auth-nocache" to the .ovpn file manually or add it on the O4A page "Advanced -> Custom Options". This will prevent the username/password from being cached if that's important to you.
NOTE: Using dnsleaktest.com I have noticed that google dsn servers appear sometimes as a dns server. This might represent a dns leak as there would seem to be no reason, for example, for a European located server to use a U.S. located google dns server. I'm not clear about why the google servers are showing up, maybe someone can verify/clarify.
However, you can force a dns server of your choosing by going to the "IP and DNS" page of the server config settings in O4A, and select "Override DNS Setting by Server". You can then use the default dns servers chosen by the author or enter your own.
Enjoy!

@@
Meditating_Apes said:
I was a bit confused about how to use OpenVPN on an Android device because there was so little information around. I thought I'd post this to make it easy for others. It turn out to be very simple. I have my Android phone (Note 2, Jellybean) rooted and Busybox installed, but neither is necessary.
The following steps relate to using an Android device with a commercial vpn service (like an anonymizing service among others), but this should help clarify in other situations too.
Step 1: download the OpenVPN config files from your vpn provider.
Step 2: download, install and start "OpenVPN for Android by Arne Schwabe" (O4A) (get it from any android app source, it's free, but donation to the author is optional and its a great app).
Step 3: on the "VPN Profiles" page of O4A, use the folder icon upper right to browse to the .ovpn config file for a server, select, and save it on the following page. The server name will appear on the Profiles page.
Note: Sometimes the server config files include a .p12 file which O4A will want to import, then require a password to decrypt...just uncheck that file (upper left) before saving; later O4A will ask for a password, just leave it blank and hit "OK", it will connect just fine (at least with my vpn provider).
Step 4: open the settings for the server you just imported (icon to the right of the server name), navigate to the "Basic" page, and enter your username and password at the bottom of the page (if your provider uses the u/p type connection). YOU ARE DONE (but, you will need to repeat this for each server you want to use).
Step 5: tap on the server name on the "Profiles" page, O4A will open the log file and you will see it going through the steps of the connection process in both the log and the notification bar . When it's finished successfully, you'll see "connected". You can check the connection in the log file. Also depending on your device the connection will show in the notification bar for as long as its connected. You can disconnect by tapping the notification.
The correct configuration settings for OpenVPN are usually included in the .ovpn file, so you likely won't need to change any config setting in O4A. However, you can add the line "auth-nocache" to the .ovpn file manually or add it on the O4A page "Advanced -> Custom Options". This will prevent the username/password from being cached if that's important to you.
NOTE: Using dnsleaktest.com I have noticed that google dsn servers appear sometimes as a dns server. This might represent a dns leak as there would seem to be no reason, for example, for a European located server to use a U.S. located google dns server. I'm not clear about why the google servers are showing up, maybe someone can verify/clarify.
However, you can force a dns server of your choosing by going to the "IP and DNS" page of the server config settings in O4A, and select "Override DNS Setting by Server". You can then use the default dns servers chosen by the author or enter your own.
Enjoy!
Click to expand...
Click to collapse
I'll try . . . . thanks

Thank you for the detailed instructions, but I think that apps like the Open VPN Connect and Totally Free VPN are more convenient. They are free and use the free servers.

How do we save battery? App drains a lot using all day

Related

WiFi not connecting at Work (home OK) on TMous HD2

Mark here.
Thanks in advance for any help offered.
Searched around here and elsewhere since last year & can't find a solution. (please don't copy whole message in reply)
Ideal solution either: 1. Able to store/save settings and password so it does not need to be entered every day (many times) or 2. Load certificate correctly.
I have a TMous HD2 running Energy ROM (Feb 2011 version)
Connects fine to home WiFi's without prompts. Also to about 10 others when traveling - no probs.
It does not connect easily to my work WiFi. I have worked out a method, but I need to re-enter settings and password many times a day. With high security p/w with various characters etc it's a real pain.
To do so, I have setup link to WLANSettings.exe on home screen. I use these settings: 1. Work (not internet), 2. WPA2/AES, 3. PEAP (not Smart card or cert). OK. Then asks for login, password (no domain needed). First time enter login etc it doesn't connect. Second time I've learned to hit OK again and after a few seconds it connects.
If I go though the 'normal' WiFi setup it asks for a Certificate. I enter the server for the cert, password as above and it will not find it. They gave me a cert file ('home grown' PEAP Authority certificate Thawte Premium Server CA) but it loads into Intermediate, not Personal and does not work. Apparently iPhone & iPad link to cert server and install it fine.
Tried:
1. I tried Odyssey (Odyssey Access Client for Windows MobileCE - Juniper Networks ). Helps, but not perfect, but it messes up my home connection. so uninstalled (updated ROM since then)
2. Tried programs to load cert. No go. (p12imprt, pfximprt; smartphoneaddcert). Various error messages - can't remember them - along the lines of not signed, not .pfx cert etc.
3. Exported cert. from PC's (WinXP) Firefox. Can't convert it to a .pfx to use the above.
Work does not support Win Mobile. So no support offered - though they've tried to help.
The settings for my mates Nokia which does work are:
PEAP and the fields are:
Personal certificate: not defined
Authority certificate: Thawte Premium Server CA User name in use: user defined User name: 'must leave blank'
Realm in use: user defined
Realm: 'must leave blank'
Allow PEAPv0: Yes
Allow PEAPv1: Yes
Allow PEAPv2: No
Under MSCHAPv2 within PEAP settings are
User name : your 'username'
Prompt password: no
Password: your 'password'
Have tried following also (rough notes):
HKEY_LOCAL_MACHINE\Comm\EAP\Extension\25.
"InvokePasswordDialog" and "InvokeUserNameDialog" value 1, switch to 0. Works till restart.
go to commMan/ menu/ settings set work & proxy or commMan/Conns/conns
changed to HKLM, gone to directory comm\EAP\extension\25. added a folder called validateservercert and added a key to this folder - DWORD. it asks me to edit the DWORD value - in value data i have added 00000000 and selected hexadecimal.
add the key [HKEY_LOCAL_MACHINE\Comm\EAP\Extension\25] and [HKEY_LOCAL_MACHINE\Comm\EAP\Extension\26]

			
				
Mmm... 'tis a difficult one.
>"Ideal solution either: 1. Able to store/save settings and password so it does not
>need to be entered every day (many times) or 2. Load certificate correctly."
Another alternative would be software to manage WiFi login - that saves passwords.
I tried Odyssey, but it messed up home connections. WiFi Monster does not do it.
Anything out there?
Mark

[Guide]Access Windows PC files directly from Android through Wi-Fi

Found this guide here. . Thought I should share as it might help someone here. Thank the original writer.
Please read the whole guide once before trying. This will help in making the process easy as most of the parts are covered in detail.
1. Introduction:
You got a file in Windows PC and you intend to transfer it to your Android device. The most common way is that we connect the device to system via USB cable. However there are alternatives such as the Bluetooth or Wi-Fi. Bluetooth is a very slow method when compared to USB and Wi-Fi. So let us take Wi-Fi as the medium. Now let me first tell you various advantages and disadvantages regarding USB when compared with WI-Fi:
Disadvantages of USB v/s Wi-Fi
1. The phone should be near to the system = you being near the system too ---- This is avoided. All you need that the PC and device to be connected to the Wi-FI network
2. Cluttering of wires ---- Avoided
3. Drivers may have to be installed ---- No drivers needs to be installed
4. In a whole way, its not very productive ---- Oh very productive
Advantages - the only one is that files transfer speed is high ---- Yes. USB has a upper hand here. Wi-Fi transfer speed is low when compared. But the difference is just a few minutes. We can live with that
So excited to start using the Wi-Fi method? Then make sure you meet the requirements.
2. Requirements:
1. Wi-Fi router - PC should be connected to this either through LAN/ Wi-Fi
2. Install ES File Explorer in your Android device (you can try other file explorers like FX File Explorer, Solid Explorer, Astro File manager). The methodology for other apps are quite similar. I will take ES File Explorer as example as I have found it to be simple and fast.
3. Windows PC with 2000/XP/Vista/7/8 (I have not tested in Windows 8 personally)
4. Administrative access for Windows PC
3. Steps:
Step 1. Install ES File Explorer
Step 2. Find IP Address, make static IP and find system name [optional]
i. Find your IP address - to do this follow the steps as below:
a. Start -> Run (or press Windows key + R)
b. Type "ncpa.cpl" (without quotes) and press enter
c. You will see the Network Connections now
d. Identify the one which is connected to the Wi-Fi router. It will be either the LAN adapter or Wireless adapter. In my case it is the Wireless adapter.
e. Double click on the connection
f. Click on details and here note down the IPv4 Address. Also make not of IPv4 Subnet Mask, Default Gateway and DNS Server.
View attachment 1343982
ii. If you are going by IP address method then it is better yet to make the IP address as static [thank you kjplasma for the tip].
An static IP address means that your system will be having the same IP address all the time and will not be changed anytime later by the router. To set static IP address:
a. Go to Network Connections
b. Double click on the connection
c. Click on properties
d. Double click on - Internet Protocol Version 4 (TCP/IPv4) and fill up the IP address as you have noted them down above.
e. Click on OK for all dialogue boxes.
View attachment 1343983
iii. You can even make note of the system name by checking the properties of “My Computer”. To do this:
a. Go to Start - Right click on My Computer [Shortcut -> Windows + Pause/Break]
b. You can find the computer name under "Computer name, domain, and workgroup settings"
View attachment 1343984
If your going by this method then it is not necessary to note down or change the IP address. However I feel that tracking your system through IP address in ES File Explorer is much more efficient and fool proof. Either the system name or IP address its okay.
Step 3.a. Windows 2000 PC
i. Open ES File Explorer in your device
ii. On top right corner tap on "Local" - select LAN
iii. Tap on "New"
iv. Here you can either scan for your system or Click on Server
v. Here in server field type the IP address (that is IPv4 Address) or the system name
vi. Type in the Username and Password which you use to access your Windows PC
vii. Give a name under "Display as" for easy identification
viii. Tap on OK.
ix. Now you will see an laptop with globe icon. Tap on it and you will see all your files/folder of the system there.
Step 3.b. Windows XP PC:
i. Firstly you will need to enable Guest account by going to Control Panel – User Accounts – Guest Account – Click on "Turn on Guest account". This is because there is no other way I found to access the files in Windows XP in Android device with actual user name and password.
ii. Share the drives or folder you want to access [Refer the Reference Note 1 below to know how to share a folder]
iii. Open ES File Explorer in your device
iv. On top right corner tap on "Local" - select LAN
v. Tap on "New"
vi. Here you can either scan for your system or Click on Server
vii. Here in server field type the IP address (that is IPv4 Address) or the system name
viii. Type in the Username and Password which you use to access your Windows PC
ix. Give a name under "Display as" for easy identification
x. Tap on OK.
xi. Now you will see an laptop with globe icon. Tap on it and you will see all your shared files/folder of the system there.
Step 3.c. Windows Vista/7/8 PC:
i. Share the drives or folder you want to access [Refer the Reference Note 1 below to know how to share a folder]
ii. Open ES File Explorer in your device
iii. On top right corner tap on "Local" - select LAN
iv. Tap on "New"
v. Here you can either scan for your system or Click on Server
vi. Here in server field type the IP address (that is IPv4 Address) or the system name
vii. Type in the Username and Password which you use to access your Windows PC
viii. Give a name under "Display as" for easy identification
ix. Tap on OK.
x. Now you will see an laptop with globe icon. Tap on it and you will see all your shared files/folder of the system there.
Note: If you are using blank password for logging into windows then follow the steps below:
a. Run - gpedit.msc to access Group Policies
b. Navigate to Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options
c. Find -> Account: Limit local account use of blank passwords to console logon only
d. Double click on it and select "disable"
View attachment 1343985
Uploaded with ImageShack.us
4. Reference Note 1 - How to share folders:
On Windows XP:
a. Right click on the folder you want to share
b. Go to the sharing tab
c. Click the "If you understand the risk but still want to share the folder, click here"
d. Under "Network Sharing and Security" tick on "Share this folder on the network" and also on "Allow network users to change my files"
e. Click OK
View attachment 1343986
On Windows Vista/7/8:
a. Right click on the folder you want to share
b. Go to the sharing tab
c. Click on "Advanced Sharing"
d. In the next dialog box tick on "Share the folder"
e. Click on "Permissions" and tick on all the checkboxes under allow.
View attachment 1344010
5. Troubleshooting:
1 - The "Login Error"
View attachment 1344070
You might get a login error at times. It happens highly when you use the computer name instead of the IP address and sometimes the error pops up even when using the IP address. You can try the below troubleshooting steps:
a. Delete the connection entry
b. Make a new entry and use the IP address this time
c. If the problem still persists, then try opening it 5-6 times repeatedly by ignoring the error.
d. If the problem still persist, then delete the connection, exit ES File Explorer completely and create a new connection again by using the IP address. This time it should work.
I feel this is a bug in the app. Hope it will be fixed in future.
Note - I was using ES File Explorer before FX File Explorer came to play store. Later after trying FX File Explorer, it had not given any error at all and hence its much more reliable. But for that you will have to pay as the app is out of beta.
2 - Wrong Username/Password even when entering the correct one
This usually happens if you put the system name instead of the IP address in the app. What you can do delete the entry and then close the app and reopen it and try a new connection with the IP address itself as this will solve the issue.
6. Useful tips:
1: You can increase the transfer speed by moving near to the router. The closer you are to the router the higher speed you gain.
2: You can even make shortcut of the folder in the network and place them on the home screen of the app. Do to that on ES File Explorer simply long press on the folder and choose "Add to server list".
7. Other Notes:
1: Please note that no internet connection is required to make this possible. Everything is done through the local network. Take out the idea from your mind that Wi-Fi is only for internet.
2: There are various other apps like KiesAir, AirDroid. But that will require you to be near the PC and access the files through a WebUI. But the guide which I have laid out here works from PC to device directly. You can sit at your living room, kitchen or bedroom or where you like within the Wi-Fi network and you are good to go.
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Hope you find this guide useful. Please leave feedback and do post here for queries. Thanks!
Nice guide. Looks a lot like the one here.
Do you know Harsha Raj? Might want to give him some credit.
ramjet73
Thanks, but........
Isn't it a lot easier to use gmote ? , also it comes with more features , like control of pc aswell as media streaming between pc, smart phones, smart TV's and game consoles, to name a few ,
ramjet73 said:
Nice guide. Looks a lot like the one here.
Do you know Harsha Raj? Might want to give him some credit.
ramjet73
Click to expand...
Click to collapse
Yes, was about to do the same but was busy with other thread that I found in SGS2 section

[Q] TAP/Bridge mode VPN in jellybean

Has anyone successfully established a bridge mode VPN connection (using TAP) in any version of Jellybean, stock or custom?
It seems that every vpn app in the play store suggests that this can't be done in JB. I'd really like to upgrade to JB, but I really don't feel like reconfiguring my whole VPN setup, just to log on to my home server every once in awhile.
Hoping I'm wrong about this...
ushlambad said:
Has anyone successfully established a bridge mode VPN connection (using TAP) in any version of Jellybean, stock or custom?
It seems that every vpn app in the play store suggests that this can't be done in JB. I'd really like to upgrade to JB, but I really don't feel like reconfiguring my whole VPN setup, just to log on to my home server every once in awhile.
Hoping I'm wrong about this...
Click to expand...
Click to collapse
Yes all you need to do is search Open VPN Tun [short for tunnel and the name OpenVPN gives the setting] in the Android Play Store to find the Open VPN Settings app created by: Friedrich Schäuffelhut
[Found Here: Open VPN Settings]
When you run it it will run some checks and may ask you to download the following to install the ifconfig binary and the Open VPN binaries in to the system [ifconfig is installed as part of busybox so you maybe good may not but app checks and runs well].
Installer Link [which can also be run on it's own and also checks things and will tell you if you are good to go or if it needs to install things for you.
Open VPN Settings Installer
IF UNSURE USE /system/xbin for install location [first question] and accept defaults or the rest.
THIS WILL REQUIRE A ROOTED ANDROID DEVICE [due to it being a tunnel and not a tap interface you need root to set the connection up and make it usable within android the android VPN client itself only accepts TAP style interfaces due to possible security risks "casual" or "non-technical" users may not understand and thus to protect you from yourself it doesn't do TUN interfaces.
You can use either blah.ovpn OR blah.cfg [Windows servers use .ovpn as extension whereas Linux favors .cfg but both are the same text based profile file]. if I remember right just create /sdcard/openvpn/<whatever> [whatever is whatever directory name [if you want one] I use the client name that way all the keys and profiles are organized and not all jumbled in one folder [or if files have same name or different content then you will be forced to do this for something like multiple OpenVPN server profiles]. THE OpenVPN app tells you this if you open it and there is no /sdcard/openvpn folder found it says to create it in the middle of the main window area]
Also, it is easiest to edit your profiles so there is no absolute directory structure pointing to the files [the ca.crt, client.crt and client.key files].
This is very easy just remove all directories so the line ONLY has the filenames [See example profile in code box below].
Here to make this easy here is an example profile file I use [your server and port as well as if you choose to have it persist the IP addresses of clients across multiple connections may be different, up to you].
Code:
.
# Specify that this is a client
client
# Bridge device setting
dev tun
# Host name and port for the server (default port is 1194)
# note: replace with the correct values your server set up
remote some.domain.or.IP.address.here <whatever port you use here>
# Client does not need to bind to a specific local port
nobind
# Keep trying to resolve the host name of OpenVPN server.
## The windows GUI seems to dislike the following rule.
## You may need to comment it out.
## This MAY NOT be a good choice
## for most folks I use a private server
## without many clients so it doesn't
## affect me if they connect a bunch of times but any security systems
## may not like it if you connect too many times to quickly and you don't
## want your own server blocking your IP when you want to connect now do you :)
resolv-retry infinite
# Preserve state across restarts
persist-key
persist-tun
# SSL/TLS parameters - files created previously
ca ca.crt
cert client.crt
key client.key
# Specify same cipher as server
cipher <choose your cipher>
# [same as you set on your server don't make it different]
## Default here is usually BF-CBC if I remember right
# Use compression
## again make sure you enabled compression in the server profile or comment it out here
comp-lzo
# Log verbosity (to help if there are problems)
## I set it a little higher but not totally verbose
## I like a little info when there are problems
## to help fix them, up to you what you choose
## Can be different from server setting
verb 3
Hopefully this helps. I am unsure of your or anyone else who may like this posts technical skills so trying to be thorough. You could also use this profile to work backward filling in the same settings asked for in the server profile.
ONCE YOU GET THE profile on to the SDCARD and connect the first time the app will always bring it up and all you have to do is tap a checkbox to turn on the VPN Settings app and then once more to enable the profile you want [yes even if just one you have to check it, BUT, IF YOU uncheck the OpenVPN enable/disable checkbox at top the next time you enable it it will auto enable last used connection !
IT REALLY IS A VERY EASY TO USE AN NICE APP [AND ONLY ONE TO SUPPORT OPEN VPN TUN [TUNNEL] INTERFACE SETUPS!

[HOWTO] Sync Activities with ANY service and even get VO2max for ANY watch

Requirements:
AmazeBackup: https://forum.xda-developers.com/smartwatch/amazfit/utility-amazebackup-backup-tool-pace-t3801165
FitnessSyncer.com account;
DropBox / GoogleDrive / OneDrive account (it will be used by FitnessSyncer to automatically sync new data when it is extracted from watch);
Runalyze.com account: it will get data from FitnessSyncer and calculate VO2max (run activities only), it's optional;
Know how to read and install/configure simple software on computer.
It works with ANY watch (Pace/Stratos/Verge), ANY firmware (unlocked or not) and ANY computer (macOS/Linux/Windows).
Download and install AmazeBackup, connect watch to computer and run option #12 (export data), it should create a folder named "export" inside its main folder;
Install and login to DropBox/GDrive/OneDrive, configure it to sync data from the "export" folder above (here you have to know how to do it by yourself, it varies from software to software, computer to computer, user your brain and tutorials from help pages and the internet);
Login to FitnessSyncer, open your account page and add a new *Source* (image 03);
Add your online service (DropBox/GoogleDrive/OneDrive) as "Maps", set "File Type" as GPX, grant permission and point to the folder in your online storage service that will sync the "export/gpx" folder (image 04 - standard Advanced Options settings should work, but you may want to change them if you find any problems with multiple data sources later);
OPTIONAL: Do the same for the TCX folder if you also want to sync non-GPS data, obviously setting "File Type" as TCX and pointing to "export/tcx" in your online storage;
In order to get VO2max calculation, you must sync to Runalyze, then go to Account page and add a new *Destination*, then fill the data and grant permissions accordingly (image 05);
OPTIONAL: If you want to sync data with other services like Endomondo or whatever you use, go back to you Account page and add new Destination, then fill the required fields in "Synchronize with Service" (image 06).
Both FitnessSyncer and Runalyze have an extensive help, read them before asking questions. I like the way Runalyze shows data, but if you just want to concentrate all your activities in one place, FitnessSyncer may be enough, it even has a phone app for both Android and iOS.
That's it, every now and then, after new activities, connect the watch to computer and run AmazeBackup option #12 again, new data should be uploaded to your online service and synced automatically via FitnessSyncer and your preferred online storage service.
All services and AmazeBackup are free, please donate to keep then running and their developers happy.
https://ko-fi.com/lfomartins
Or use XDA's donate link under my username. Thanks!

Windows 11 IE mode and ActiveX? [SOLVED]

Hi,
Since IE is gone I'm looking for a way to access my cctv, which requires activeX plugin to work.
Anybody had any luck getting it to work in IE mode or found some other workaround?
Managed to get it to work using Group policies and Enterprise Mode site list.
Seamless and fully working, at least with my CCTV ActiveX plugin.
Requirements:
Group Policy Templates: https://www.microsoft.com/en-us/edge/business/download
Enterprise mode site list manager https://www.microsoft.com/en-us/download/details.aspx?id=49974
Unpack templates and copy msedge.admx and corresponding language files for your version of windows to C:/WIndows/PolicyDefinitions
Run Site List Manager and add urls to automatically load in IE mode. Options that worked for me are:
Open in: MS EDGE,
Standalone IE DISABLED,
Allow Redirect ENABLED,
Compat Mode: IE11 Document mode
File -> Save to XML
#DISCLAIMER#
playing with above values might result in Edge going into loop of rapid crashes and restarts, stealing focus from other apps and requiring log out/reboot to kill. Happened to me several times until I found combination that works.
run gpedit.msc
Computer Configuration -> Administrative Templates -> Microsoft Edge
find Configure the Enterprise Mode Site List, enable it, and set path to your xml file containing sites you want to run in IE mode
example: file:///c:/Users/[Your User Account]/Documents/iemode.xml
enjoy ActiveX and other deprecated stuff in Edge.
zbaracki said:
Managed to get it to work using Group policies and Enterprise Mode site list.
Seamless and fully working, at least with my CCTV ActiveX plugin.
Requirements:
Group Policy Templates: https://www.microsoft.com/en-us/edge/business/download
Enterprise mode site list manager https://www.microsoft.com/en-us/download/details.aspx?id=49974
Unpack templates and copy msedge.admx and corresponding language files for your version of windows to C:/WIndows/PolicyDefinitions
Run Site List Manager and add urls to automatically load in IE mode. Options that worked for me are:
Open in: MS EDGE,
Standalone IE DISABLED,
Allow Redirect ENABLED,
Compat Mode: IE11 Document mode
File -> Save to XML
#DISCLAIMER#
playing with above values might result in Edge going into loop of rapid crashes and restarts, stealing focus from other apps and requiring log out/reboot to kill. Happened to me several times until I found combination that works.
run gpedit.msc
Computer Configuration -> Administrative Templates -> Microsoft Edge
find Configure the Enterprise Mode Site List, enable it, and set path to your xml file containing sites you want to run in IE mode
example: file:///c:/Users/[Your User Account]/Documents/iemode.xml
enjoy ActiveX and other deprecated stuff in Edge.
Click to expand...
Click to collapse
I followed your fancy guide but one thing does not work yet. Sometimes (especially in CCTV) ActiveX needs a right to write on HDD. E.g.: Saving snapshot or recorded video from NVR. Previously it could be resolved by starting IE as an administrator. (Right-click, run as admin). But now even I can run Edge as admin it seems privileges don't inherit to IE. So IE mode can save nothing to HDD.
Any idea is appreciated.

Categories

Resources