← All posts
4 min read

Fix: GlobalProtect Script Error “Access Is Denied” on Vendor-Controlled Laptops

TroubleshootingWindowsVPN

If you’re trying to install or log in to GlobalProtect VPN and run into a script error that says:

“An error has occurred in the script on this page. Access is denied.”

— you’re not alone. This common issue can completely block access to GlobalProtect, especially on vendor-managed laptops or corporate devices with strict group policies.

The cause? Internet Explorer.

Why this happens

Many older versions of GlobalProtect still try to launch Internet Explorer for authentication during installation or first-time login. On corporate-managed devices, IE is often disabled or locked down due to security risks — which causes GlobalProtect to fail when it tries to load the login page, resulting in the “Access is denied” script error.

This is a known problem that affects many users, particularly in enterprise environments where IT policies block the use of legacy browsers.

The fix

Install GlobalProtect using a command that forces it to use your default browser — Chrome, Edge, Firefox — instead of Internet Explorer.

msiexec.exe /i GlobalProtect.msi DEFAULTBROWSER=YES

By adding DEFAULTBROWSER=YES you tell GlobalProtect to skip IE entirely and open the login process in whatever modern browser you’ve set as default, solving the script error instantly.

Step by step

  1. Download the latest GlobalProtect.msi from your organisation’s portal.
  2. Open Command Prompt as Administrator.
  3. Run msiexec.exe /i GlobalProtect.msi DEFAULTBROWSER=YES
  4. Let the installation complete.
  5. Launch GlobalProtect — the login should now open in your default browser, with no script errors.

This method works reliably on vendor-issued laptops where group policies block outdated browsers like IE. It ensures GlobalProtect integrates with modern browser security and compatibility.

Still not working?

  • Make sure you’re running the command with admin rights.
  • Check your system default browser is set to Edge, Chrome or Firefox.
  • Confirm your .msi installer is up to date.

This workaround is widely recommended in the IT community. You can read others’ success stories and troubleshooting tips in this Reddit thread.

Final thoughts

This solution is a lifesaver for users stuck with GlobalProtect login problems, especially in tightly managed enterprise environments. By using DEFAULTBROWSER=YES you avoid compatibility issues with Internet Explorer and unlock a smoother, faster login experience.

No more script errors. No more dead ends. Just a simple fix that works.