Out-of-date ActiveX Controls - Part 2

Hello, I do apologize for prematurely deleting the first question about ActiveX.  
I am at; http://blogs.msdn.com/b/askie/archive/2014/08/14/how-do-i-test-the-testing-the-out-of-date-activex-controls-feature.aspx
At Section 4, What exactly needs to be deleted?  Is it "only" the first time that "latestgroup="1"" occurs?  This does not make sense to me, being that they show the entire <groupentries> section.
The VersionList xml is found at; https://iecvlist.microsoft.com/ie11blocklist/1401746408/versionlist.xml

I would bet it is the entire <groupentries> section, but would like to verify this with you.

The other concern I have is that the xml's <groupentries> section is not exactly what is shown here, so I would ask of you to state clearly what to delete.
Thank you very much for your help.
chimaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

jcimarronCommented:
chima--
First of all, are you aware of this statement in
https://support.microsoft.com/kb/2991000#appliesto
"Starting September 9, 2014, out-of-date ActiveX controls will be blocked on computers that have the August Cumulative security update for Internet Explorer (MS14-051) or a later update applied. If your enterprise has a dependency on outdated versions of Java in the Internet Zone in affected versions of Internet Explorer, you are affected by this change. "

This sounds like the blocking of old ActiveX controls will occur automatically early next month.

So maybe modifying the .xml file manually is really not necessary.

In fact that seems to be mentioned in the blogs.msdn article
"If your organization has a dependency on an outdated version of Java, you can run the following test to mirror the end-user experience on September 9, 2014."

"I would bet it is the entire <groupentries> section"  I would agree, though I have not tried. However if you back up the .xml file before making changes, you can always revert if you make an error.

So you would delete
latestgroup="1"/>
< groupentry groupname="Java(TM) 1.4.2_43" fwdlink="http://" latestgroup="1"/>
< groupentry groupname="Java(TM) 1.5.0_71" fwdlink="http://" latestgroup="1"/>
< groupentry groupname="Java(TM) 1.6.0_81" fwdlink="http://" latestgroup="1"/>
< groupentry groupname="Java(TM) 1.7.0_65" fwdlink="http://" latestgroup="1"/>
< groupentry groupname="Java(TM) 1.8.0_11" fwdlink="http://" latestgroup="1"/>
< /groupentries>

What is shown in the blogs.msdn article is exactly what I have in my .xml file.  Maybe the difference in yours is due to a different version of Java or of Windows7
0
chimaAuthor Commented:
Jcimarron, yes I am aware.  I was asked to test it.  I am all set up for testing it.  Please allow me to keep this question open, just in case I have questions/problem when I re-enable the Visionlist.xml  I do not think I will have problems.
I'll do this on Sept 8th.
thanks
0
jcimarronCommented:
chima--
Good luck and please let us know the outcome.
0
Cloud Class® Course: Certified Penetration Testing

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

chimaAuthor Commented:
Jcimarron, this is the command I used to turn this off; reg add "HKCU\Software\Microsoft\Internet Explorer\VersionManager" /v DownloadVersionList /t REG_DWORD /d 0 /f

Would it be correct, to turn it back on I would need to change 0 /f   -to-  /o     ( o for on)?
I'm going to manual search for this reg key.
0
chimaAuthor Commented:
I checked with my co-worker and she does not have the DownloadVersionList, therefore I think I would be safe to delete the entire entry;
reg key
Any comments?
0
jcimarronCommented:
chima--
I have not worked with VersionList xml  other than what I have earlier posted.

However, if you create appropriate backup  I would think you could delete the DownloadVersion entry.  

The command REG_DWORD /d 0 /f is common.  But I have not seen  /o
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
chimaAuthor Commented:
jcimarron, I went ahead and just deleted it.  I believe this was the right, safe action.  So far so good.  Points coming to you shortly.
0
chimaAuthor Commented:
thanks
0
jcimarronCommented:
chima--
You are welcome.  Glad to have helped.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.