PC Review


Reply
Thread Tools Rate Thread

ActiveX won't install when IE7 is run with full admin token

 
 
fltcpt@yahoo.com
Guest
Posts: n/a
 
      25th Jan 2008
My process requires admin privilege to modify system stuff. So on
Vista, it is elevated (with the request admin manifest). And it spawns
IE. I realize it would be spawning IE with the full token (since
elevation is a one way street) but to be good citizen it spawns IE
with medium integrity (the MS recommended way: dup token, change IL to
medium, then do CreateProcessAsUser with the new token). It works fine
until IE browses to a site requiring ActiveX. IE complains security
setting does not allow ActiveX install. What?? Do I really have to
have a helper process (with the splitted token) and have it spawn IE?
No otherway? The way I see it, if I choose to run IE with full token I
should still be able to install ActiveX, I don't understand the reason
of it. Could this be an IE bug?

I am starting to appreciate the hatred people have towards Vista. It's
almost like it requires every process that needs admin privilege to
have a helper and a pipe between the two. That's alot more work and
alot less reliable than before, and there are alot of applications out
there that require admin privileges - not every app is a dumb word
processor.

Anyway, any help appreciated.
 
Reply With Quote
 
 
 
 
Jesper
Guest
Posts: n/a
 
      26th Jan 2008
Check the security settings on the IE instance that you open. Specifically,
check what zone your page that attempts to install the ActiveX control is in,
and what the value of the "Download [signed|unsigned] ActiveX controls" is.

Would I be correct in assuming that your page is either in the Local
Computer Zone or that the control is not signed, or both? Either would cause
a failure to install the control.
---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20


"(E-Mail Removed)" wrote:

> My process requires admin privilege to modify system stuff. So on
> Vista, it is elevated (with the request admin manifest). And it spawns
> IE. I realize it would be spawning IE with the full token (since
> elevation is a one way street) but to be good citizen it spawns IE
> with medium integrity (the MS recommended way: dup token, change IL to
> medium, then do CreateProcessAsUser with the new token). It works fine
> until IE browses to a site requiring ActiveX. IE complains security
> setting does not allow ActiveX install. What?? Do I really have to
> have a helper process (with the splitted token) and have it spawn IE?
> No otherway? The way I see it, if I choose to run IE with full token I
> should still be able to install ActiveX, I don't understand the reason
> of it. Could this be an IE bug?
>
> I am starting to appreciate the hatred people have towards Vista. It's
> almost like it requires every process that needs admin privilege to
> have a helper and a pipe between the two. That's alot more work and
> alot less reliable than before, and there are alot of applications out
> there that require admin privileges - not every app is a dumb word
> processor.
>
> Anyway, any help appreciated.
>

 
Reply With Quote
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
unable to install activex control-microsoft full safety scan =?Utf-8?B?ZGFubnk=?= Windows XP New Users 1 17th Jul 2006 12:19 AM
do I NEED Admin permissions to install ActiveX? John Windows XP Internet Explorer 2 10th Jan 2006 02:53 PM
Install ActiveX w/o local Admin privs? John Windows XP Internet Explorer 0 28th Dec 2005 02:31 AM
Failed to find token (Windows updates will not install) arjay Windows XP Help 0 15th Oct 2005 12:01 AM
ActiveX install admin privileges ? Antoine GOLIO Windows XP Internet Explorer 0 21st Jul 2004 04:41 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 07:59 AM.