Yo, after testing and trying out for hours, i thing i have got it...
When JuniperSetupServiceInstaller.exe is installed, nothing else is needed, even if the user has restricted rights on the pc.
All other components will be installed automatically.
The JuniperSetupServiceInstaller.exe will install the same components, which are in the JuniperSetupSP1.cab into the directory C:\Windows \Downloaded Program Files, even if the applet or activex control is not installed by the user.
So "normally" the ActiveX or Applet will not appear anymore, when JuniperSetupServiceInstaller.exe is installed.
IF IT STILL APPEARS, the user has to install them once with local administrative rights, and it will not appear again.
But if the user does not install the activex control, that does not matter to the functionality. When user is logged on with restriced rights, and JuniperSetupServiceInstalller has been installed before with local adm. rights, everything is fine, and the user has not to install anything more.
JUST JAVA RE is needed, but ONLY when the user uses Firefox.
I wish they bring out a VPN Client which does work without any browser (thats maybe the only one - BUT BIG - advantage of Avantails SSL VPN Solution).
Juniper Solution is to much depending on compatible webbrowser and java engine.