terminal services group policy for user ActiveX install?

Posted on 2009-04-28
Last Modified: 2013-11-21
i want all users, admins and non-admins, to be able to install activeX controls, signed and unsigned, when they are using IE in a terminal services session (aka citrix). i have attempted this through group policy with no success. for openers let's set it up for Trusted Sites.  please advise.
Question by:Curtiss
    LVL 12

    Expert Comment

    Try these settings:

    User Configuration/Administartive Templates /Windows Components /Internet Explorer /Internet Contriol Panel/security Page
    In there Choose the zone you want the setting to be Applied to ie Trusted Site Zones
    in there these are the settings you need to look at depending on what you want:
    Download signed ActiveX controls
    Download unsigned ActiveX controls
    Run ActiveX Controls and Plugins
    LVL 2

    Accepted Solution

    confirmed; i have a GPO applied to my citrix servers with Merge loopback turned on. so whenever users log into the citrix servers that GPO supercedes their normal IE settings. if i run the Group Policy Results Wizard in GPMC for userx on one of the citrix servers, it's confirmed that GPO is winning and the correct settings are all enabled. in fact if that user opens IE on a citrix server and checks his settings in IE, all the activex controls are set to "enable." but he still cannot install the activex control in question; he gets

    "failure to create object element for control; access is denied."

    it has been tested that if i make a user a local admin on the citrix server, he is able to install the activex control.

    Featured Post

    Too many email signature updates to deal with?

    Are you constantly visiting users’ desks making changes to email signatures? Feel like it’s taking up all of your time? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

    Join & Write a Comment

    Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
    Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now