OK, let's take a stab at this one. I will explain some things I have learned, and then I need feedback on what I may be missing.
First I did not want to have the extra text of WebPage Dialog showing in message boxes and pop up form, so I set InlineWindows Mode="On" in web.config, which pops up dialogs inside the context of the application, and does not open another browser window. This eliminated the need for pop up blockers (I think).
Then I went to test a VWG site I built on an Amazon cloud, which is a pretty locked down version of IE7. Right away, I realized I needed to add my site to the trusted sites list, or it would not show up. That is first thing I have to train users to do.
Next I noticed that my dialog windows were not displaying "most" of the items in it. Strange that it pops up, but has missing text boxes and other controls. So I narrowed it down to Tools...Internet Options...Security Tab... Internet...Custom Level...Scripting...Active Scripting...Enable - now I have read other articles that say how scripting needs to be turned on, but that is the second thing I have to train users to do.
Now message boxes do not show up in IE8... but I believe that will be fixed in 6.3.7.
Where I am going with this is that I am feeling a bit of a risk in using Dialog Boxes of any kind. Maybe the thing to do is convert these to user controls that simply show in a window.
I can see getting users to trust the site... but describing to them to turn on Active Scripting is pushing it.
Now here is a strange one on active scripting... I had to change this in the Internet Zone... not the Trusted Sites zone. If I change this in the Trusted Sites zone, is does not resolve the problem. Why is that?
1) Besides trusted sites and active scripting, is there another setting I need to train my users? Different in different browser or just IE is the issue?
2) Is the issue the dialog box? Is that what needs active scripting? If so, if I convert to user controls that just appear in the main form, will that solve the problem? Have I properly eliminated the pop up blockers with the inline choice?
3) Can I detect if the user has active scripting (probably a javascript nightmare), and use a user control or a dialog box based on that. Come to think of it, too darn complex...
4) Do I need a whitepaper on training my users what settings they need to set for the "standard" VWG program. If so, I think there should be an ongoing one maintained by VWG with a link. If any of us do have a site that we want thousands of users to come to, this problem brings that to a screeching halt.