• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4011
  • Last Modified:

GPO to install ActiveX as Non-Admin

I cannot get a particular ActiveX control to be allowed for installation via GPO with a non-admin user logged in.  I have tried all the regular GPO settings that regulate signed/unsigned ActiveX controls in our Trusted Zones, Intranet Zone, etc...but it still won't work.  It is our mail server on our Intranet.

I've read that Windows 2000 and XP are designed to work this way, but wouldn't a GPO setting allow me to override that?  I thought that was the purpose.  Is what I'm trying to do even possible?  I've also read that the ActiveX Installer Service in Vista was created to work around this issue.  That leads me to believe my previous statement to be true.

Can anyone confirm that this can be done?  I've done a lot of searching and nothing seems to actually let us do this.  If I add them to the Power Users group the ActiveX will install, but that defeats the purpose of using a non-admin account in the first place.
0
thelonerangerr
Asked:
thelonerangerr
  • 2
1 Solution
 
top_gizmoCommented:
Which ActiveX control is it?
0
 
thelonerangerrAuthor Commented:
Domino Web Access 7
0
 
Kini pradeepPrincipal Cloud and security consultantCommented:
http://support.microsoft.com/kb/280579 This describes it.
However i believe you still need adminisitartor or a Power users creds to install it.
its worth a try because the article says that AD would use the creds of the user who created the policy to install the control.

May be some body else who has tried it could comment.
0
 
thelonerangerrAuthor Commented:
Tried that.  I can get everything in there, but it only puts my .cab file into C:\Program FIles\APPNAME.  I don't know enough about Visual Installer to make it work right.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now