Solved

Cannot allow users to install ActiveX controls, via Group Policy.

Posted on 2007-11-16
5
9,724 Views
Last Modified: 2013-12-08
I'm having trouble granting my users the ability to install ActiveX controls on their workstations.  I've configured my policy according to the solution at http://www.experts-exchange.com/Security/Misc/Q_21917199.html, but it doesn't seem to work.  When the users go to, say, adobe.com and attempt to install Flash Player 9, all they see is a red "X" icon similar to the broken image placeholder.  Am I missing something?
0
Comment
Question by:g33x0r
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 13

Expert Comment

by:cshepfam
ID: 20301488
Go back to Group Policy


Go to Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Internet Zone


Click on and enable Run ActiveX controls and plugins and
Download signed ActiveX controls



You may see other things in there that you may want to enable also.  Afterwards, go to Start > Run and type in gpupdate



Also, if I may suggest...use a proxy to control internet activity such as websites allowed to visit, streaming music/video that will eat up your bandwidth, etc.

CC Proxy is a great software
0
 
LVL 3

Expert Comment

by:top_gizmo
ID: 20307942
Many time gpupdate or gpupdate /force will not actually make the changes take effect.  A good reboot should do it.
0
 

Author Comment

by:g33x0r
ID: 20315526
I've enabled Run ActiveX controls and plugins, and it's still not working (same result: broken image icon, and the gold Information Bar never shows).

Here's what my policy looks like in Group Policy Management Console:

Computer Configuration/......../Security Page/Internet Zone:
Policy Setting
Download signed ActiveX controls Enabled (Prompt)
Download unsigned ActiveX controls Enabled (Prompt)
Run ActiveX controls and plugins Enabled (Enable)
Script ActiveX controls marked safe for scripting Enabled (Enable)

It's exactly the same on the User side of the policy.  The policy is applied at the domain level, and is applicable by Authenticated Users.  I've verified it's applying correctly via RSoP.msc.

Am I missing a setting somewhere?
 
0
 
LVL 3

Accepted Solution

by:
top_gizmo earned 250 total points
ID: 20315625
Well, according to Adobe, you need admins to install flash player.  BUT, there is a work around if you give the user permissions on the folder and registry keys.

Here are the links...

http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_15511&sliceId=2#permissions

http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_19148&sliceId=2
0
 

Author Closing Comment

by:g33x0r
ID: 31409649
Correct about admin privileges, but I refused to believe it until now.

I signed up & requested a license from them, and downloaded & deployed the .MSI installer.
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question