If you prefer, you can keep the security setting level at Medium and just make the following change:
Put <windchill server url> in the trusted sites list, reset the settings to medium and then make the following single custom level change:
"Allow script-initiated windows without size or position constraints" set to Enable
Rgds
Gary