Can Chromium Edge install ClickOnce app deployed to a LAN share by Visual Studio 2019 Publish Wizard

%3CLINGO-SUB%20id%3D%22lingo-sub-2640560%22%20slang%3D%22en-US%22%3ECan%20Chromium%20Edge%20install%20ClickOnce%20app%20deployed%20to%20a%20LAN%20share%20by%20Visual%20Studio%202019%20Publish%20Wizard%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2640560%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20not%20been%20able%20to%20install%20a%20Winforms%20desktop%20application%20from%20a%20LAN%20share%20using%20Visual%20Studio%202019%20Publish%20Wizard%20and%20the%20current%20Chromium%20Edge%20(v92.x).%26nbsp%3B%20Edge%20intercepts%20the%20setup.exe%20file%20as%20if%20it%20were%20a%20normal%20download%20and%20does%20not%20invoke%20the%20installation%20process%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22Intercept.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F302717iA99A14C5A78FF3B5%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Intercept.png%22%20alt%3D%22Intercept.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EOur%20networking%20team%20has%20enabled%20ClickOnce%20in%20Edge%20in%20ActiveDirectory%20policy%20and%20has%20set%20a%20number%20of%20other%20policies%20related%20to%20SmartScreen%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Edge%20ActiveDirectory%20settings.png%22%20style%3D%22width%3A%20805px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F302718i2DE28341B17EB693%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Edge%20ActiveDirectory%20settings.png%22%20alt%3D%22Edge%20ActiveDirectory%20settings.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20Visual%20Studio%202019%20publishes%20the%20%3CSTRONG%3Epublish.htm%3C%2FSTRONG%3E%20page%20to%20the%20LAN%20share%2C%20the%20RUN%20button%20on%20that%20page%2C%20when%20clicked%2C%20attempts%20to%20download%20the%20%3CSTRONG%3Esetup.exe%3C%2FSTRONG%3E%20file%20using%20the%20%3CA%20target%3D%22_blank%22%20rel%3D%22noopener%22%3Efile%3A%2F%2F%3C%2FA%3E%26nbsp%3Bprotocol.%20This%20is%20the%20address%20in%20the%20browser%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3Efile%3A%2F%2Fmyserver%2FC%24%2Fapps%2Fmyapp%2Fsetup.exe%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20following%20question%20on%20this%20forum%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fenterprise%2Fsmartscreen-turned-off-gt-java-webstart-jnlp-files-are-marked-as%2Fm-p%2F1584480%2Fhighlight%2Ftrue%23M2272%22%20target%3D%22_blank%22%3ERe%3A%20SmartScreen%20turned%20off%20-%26gt%3B%20Java%20Webstart%20JNLP%20Files%20are%20marked%20as%20%22can%20harm%20your%20computer%20-%20Microsoft%20Tech%20Community%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ediscusses%20adding%20file-extension%20and%20domain-name%20pairs%20to%20the%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%3E%3CDIV%3E%3CSTRONG%3EExemptDomainFileTypePairsFromFileTypeDownloadWarnings%26nbsp%3B%3C%2FSTRONG%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3Eregistry%20entry%3B%20the%20example%20given%20there%2C%20which%20the%20poster%20called%20successful%2C%20includes%20the%20%3CSTRONG%3Ehttps%3A%2F%2F%3C%2FSTRONG%3E%20protocol%20as%20part%20of%20the%20domain-name%20(see%20his%20%22hitco.at%22%20domain%20example%20at%20the%20bottom%20of%20this%20message).%20So%20I%20tried%20to%20include%20%3CSTRONG%3E%3CA%20target%3D%22_blank%22%20rel%3D%22noopener%22%3Efile%3A%2F%2F%3C%2FA%3E%3C%2FSTRONG%3E%26nbsp%3Bas%20part%20of%20our%20domain-name%20by%20analogy%20(%26nbsp%3B%26nbsp%3B%3CSTRONG%3E%22file%3A%2F%2F*.ourdomain.net%22%3C%2FSTRONG%3E%26nbsp%3B)%20but%20Edge%20continues%20to%20intercept%20the%20setup.exe%20file.%26nbsp%3B%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3EIf%20Edge%20can%20work%20with%20ClickOnce%20packages%20installed%20to%20an%20intranet%20LAN%20share%2C%20not%20to%20a%20website%2C%20how%20is%20that%20done%3F%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CPRE%3E%5BHKEY_LOCAL_MACHINE%5CSOFTWARE%5CPolicies%5CMicrosoft%5CEdge%5CExemptDomainFileTypePairsFromFileTypeDownloadWarnings%5D%0A%221%22%3D%22%7B%5C%22domains%5C%22%3A%20%5B%5C%22https%3A%2F%2F*.hitco.at%5C%22%2C%20%5C%22https%3A%2F%2Fhitco.at%5C%22%5D%2C%20%5C%22file_extension%5C%22%3A%20%5C%22jnlp%5C%22%7D%22%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FPRE%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2643237%22%20slang%3D%22en-US%22%3ERe%3A%20Can%20Chromium%20Edge%20install%20ClickOnce%20app%20deployed%20to%20a%20LAN%20share%20by%20Visual%20Studio%202019%20Publish%20Wi%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2643237%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1126891%22%20target%3D%22_blank%22%3E%40lloydmalvern%3C%2FA%3E%26nbsp%3BHello!%26nbsp%3B%20When%20the%20setup.exe%20file%20is%20blocked%20are%20you%20able%20to%20hover%20over%20the%20blocked%20message%20in%20the%20Downloads%20window%2C%20do%20you%20see%20a%20trash%20can%20and%20%22...%22%3F%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20click%20on%20%22...%22%20you%20should%20have%20the%20option%20to%20%22Keep%22%20the%20file.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHere%20is%20our%20documentation%20with%20additional%20information%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployedge%2Fmicrosoft-edge-security-downloads-interruptions%23user-experience-for-downloads-lacking-gestures%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployedge%2Fmicrosoft-edge-security-downloads-interruptions%23user-experience-for-downloads-lacking-gestures%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWould%20this%20work%20for%20your%20scenario%3F%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3E-Kelly%3C%2FEM%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

 

We have not been able to install a Winforms desktop application from a LAN share using Visual Studio 2019 Publish Wizard and the current Chromium Edge (v92.x).  Edge intercepts the setup.exe file as if it were a normal download and does not invoke the installation process:

 

Intercept.png

Our networking team has enabled ClickOnce in Edge in ActiveDirectory policy and has set a number of other policies related to SmartScreen:

Edge ActiveDirectory settings.png

 

When Visual Studio 2019 publishes the publish.htm page to the LAN share, the RUN button on that page, when clicked, attempts to download the setup.exe file using the file:// protocol. This is the address in the browser:

 

file://myserver/C$/apps/myapp/setup.exe

 

The following question on this forum

 

Re: SmartScreen turned off -> Java Webstart JNLP Files are marked as "can harm your computer - Micro...

 

discusses adding file-extension and domain-name pairs to the 

 

ExemptDomainFileTypePairsFromFileTypeDownloadWarnings 
 
registry entry; the example given there, which the poster called successful, includes the https:// protocol as part of the domain-name (see his "hitco.at" domain example at the bottom of this message). So I tried to include file:// as part of our domain-name by analogy (  "file://*.ourdomain.net" ) but Edge continues to intercept the setup.exe file.  
 
If Edge can work with ClickOnce packages installed to an intranet LAN share, not to a website, how is that done?
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExemptDomainFileTypePairsFromFileTypeDownloadWarnings]
"1"="{\"domains\": [\"https://*.hitco.at\", \"https://hitco.at\"], \"file_extension\": \"jnlp\"}"

2 Replies

@lloydmalvern Hello!  When the setup.exe file is blocked are you able to hover over the blocked message in the Downloads window, do you see a trash can and "..."? 

 

If you click on "..." you should have the option to "Keep" the file.  

 

Here is our documentation with additional information: https://docs.microsoft.com/en-us/deployedge/microsoft-edge-security-downloads-interruptions#user-exp... 

 

Would this work for your scenario?  

 

-Kelly

@Kelly_Y 

 

When the "keep" option is used, the setup.exe is saved to the downloads folder, and then when it is clicked on, the rest of the deployment package cannot be found, since the other files have not been downloaded to the download folder but still sits up on the LAN share.  Under Internet Explorer  the setup.exe was launched not saved to disk.

 

 So we're going to switch over to the deploy-to-website mode. I have a couple of questions about that but will start a separate message.