To automatically download and install ActiveX controls

  • Thread starter Thread starter Spin
  • Start date Start date
S

Spin

The ability to automatically download and install ActiveX controls means one
has to set their browser to either "Low Security", or they need to
"Customize" their current security level to allow to download and install
ActiveX controls, or add the site to their IE Trusted Sites list. Do I
understand this correctly?
 
Yes, but is a security risk to do it that way. In IE7 there won't be any
automatic ActiveX installation permitted for that reason. It is better to
be notified about such installations.
 
ActiveX is a security risk period. I am interested in how people manage
allowing ActiveX in IE their environments.

--
Spin

Colin Barnhorst said:
Yes, but is a security risk to do it that way. In IE7 there won't be any
automatic ActiveX installation permitted for that reason. It is better to
be notified about such installations.
Click to expand...
 
Spin said:
ActiveX is a security risk period. I am interested in how people manage
allowing ActiveX in IE their environments.
Click to expand...


Set IE to prompt for installation, of course, and don't allow users to
run under elevated privileges, so that even if they click <Yes> nothing
happens without a knowledgeable technician checking the safety of the
control.


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
 
Spin said:
Do you manage allowing it through group policy or do so on a individualized
machine basis?
Click to expand...


Allowing is done on an individual basis, provided that access to the
web site is required for the performance of the user's duties.


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
 
Oh that's right, I believe you have to be an administrator of a machine to
allow the installation of an ActiveX control.
 
Back
Top