Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 9730
  • Last Modified:

Cannot allow users to install ActiveX controls, via Group Policy.

I'm having trouble granting my users the ability to install ActiveX controls on their workstations.  I've configured my policy according to the solution at http://www.experts-exchange.com/Security/Misc/Q_21917199.html, but it doesn't seem to work.  When the users go to, say, adobe.com and attempt to install Flash Player 9, all they see is a red "X" icon similar to the broken image placeholder.  Am I missing something?
0
g33x0r
Asked:
g33x0r
  • 2
  • 2
1 Solution
 
cshepfamCommented:
Go back to Group Policy


Go to Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Internet Zone


Click on and enable Run ActiveX controls and plugins and
Download signed ActiveX controls



You may see other things in there that you may want to enable also.  Afterwards, go to Start > Run and type in gpupdate



Also, if I may suggest...use a proxy to control internet activity such as websites allowed to visit, streaming music/video that will eat up your bandwidth, etc.

CC Proxy is a great software
0
 
top_gizmoCommented:
Many time gpupdate or gpupdate /force will not actually make the changes take effect.  A good reboot should do it.
0
 
g33x0rAuthor Commented:
I've enabled Run ActiveX controls and plugins, and it's still not working (same result: broken image icon, and the gold Information Bar never shows).

Here's what my policy looks like in Group Policy Management Console:

Computer Configuration/......../Security Page/Internet Zone:
Policy Setting
Download signed ActiveX controls Enabled (Prompt)
Download unsigned ActiveX controls Enabled (Prompt)
Run ActiveX controls and plugins Enabled (Enable)
Script ActiveX controls marked safe for scripting Enabled (Enable)

It's exactly the same on the User side of the policy.  The policy is applied at the domain level, and is applicable by Authenticated Users.  I've verified it's applying correctly via RSoP.msc.

Am I missing a setting somewhere?
 
0
 
top_gizmoCommented:
Well, according to Adobe, you need admins to install flash player.  BUT, there is a work around if you give the user permissions on the folder and registry keys.

Here are the links...

http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_15511&sliceId=2#permissions

http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_19148&sliceId=2
0
 
g33x0rAuthor Commented:
Correct about admin privileges, but I refused to believe it until now.

I signed up & requested a license from them, and downloaded & deployed the .MSI installer.
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now