GPO to install ActiveX as Non-Admin
Posted on 2007-12-05
I cannot get a particular ActiveX control to be allowed for installation via GPO with a non-admin user logged in. I have tried all the regular GPO settings that regulate signed/unsigned ActiveX controls in our Trusted Zones, Intranet Zone, etc...but it still won't work. It is our mail server on our Intranet.
I've read that Windows 2000 and XP are designed to work this way, but wouldn't a GPO setting allow me to override that? I thought that was the purpose. Is what I'm trying to do even possible? I've also read that the ActiveX Installer Service in Vista was created to work around this issue. That leads me to believe my previous statement to be true.
Can anyone confirm that this can be done? I've done a lot of searching and nothing seems to actually let us do this. If I add them to the Power Users group the ActiveX will install, but that defeats the purpose of using a non-admin account in the first place.