We have a client with a strict domain policy in effect. They are able to log onto Web Access, but when they click on scan, they get a "Unable to open this helper application for...../App_Services/ScanningService.asmx. The protocol specified in this address is not valid. Make sure the address is correct and try again.
Their domain policy blocks all .exe calls unless they're defined in the allow list, which they have done for LFScan.exe installed on the local machine. If they turn off this domain policy, then scanning works fine with no problems. But they need to keep this policy in effect. The WA server is not on their domain. The website has been added to the Trusted Sites list.
What else needs to be allowed in order to be able to launch scanning successfully?