Skip to main content
gpiotrow
Participant
January 17, 2017
Question

HIPS blocking TEMP folders on our servers prevents Flash install

  • January 17, 2017
  • 2 replies
  • 396 views

Hi,

I work on a government project and our Citrix servers use Adobe Flash.  A requirement on the servers is to run HIPS, which is set to block any launching of files from folders with name TEMP.  I have changed the environment variables to point to other folders, but with Flash, it still requires to use that c:\windows\macromed\Temp folder for the install.  Why can't the Flash install just use the System Temp folder?  We have to go thru the process of requesting that HIPS be disabled to do our updates because of this problem.

Thanks,

George Piotrowski

CSRA

[moderator: removed personal information per forums privacy policy]

    This topic has been closed for replies.

    2 replies

    _maria_
    Legend
    January 17, 2017

    Hi,

    Due to security issues Flash Player no longer launches from the System TEMP folder, instead a TEMP directory in C:\windir\sysdir\Macrome\Flash is created, as you have observed.  This change will not be reversed.

    --

    Maria

    jeromiec83223024
    Inspiring
    January 17, 2017

    I can't speak to the original decision for why things are located where they are; however, I will point out that the prospect of re-engineering an installer that's running on ~ 2 billion systems/month is non-trivial, and a path fraught with peril.  As an example, we still have a large user-base on WinXP, and our installers target all Windows platforms between XP and Win10 (with some minor exceptions, like the Windows Server flavors).

    A couple things that I was wondering, were:

    - Are you already familiar with, and/or using our install packages intended for deployment in enterprise organizations?

    - If so, which distribution methodology are you using (SCUP, SCM, etc)

    - Are you familiar with the Flash Player deployment that Citrix specifically maintains and makes available for their customers?

    I'm thinking that some of the following resources might provide some useful options for you, in terms of more elegant methods for distributing Flash Player inside your organization that might help avoid some of these headaches (without requiring an installer redesign).

    Adobe Flash Player Distribution

    Adobe Flash Player Administration Guide for Flash Player | Adobe Developer Connection

    Products - XenDesktop - Download Flash Plugin - Citrix