Registering an OCX file with standard user rights

[Guest]

I work for a company that provides web-based apps. Our application's login
web page downloads an OCX file that needs to be registered. If the user that
is logged in to the computer (Win2k, WinXP) has power user or administrative
rights, the OCX file registers fine and the AcitveX control is visible on the
page. Some of our customers who are concerned with security have a problem
granting these access rights to users, and rightly so. When someone with
normal user rights accesses this web page, the ActiveX control is not
visible. (Red X where the control should be)

How can I get a user with non-administrative rights to be able to register
this OCX file? I've tracked what is added to the registry when our page is
accessed, and granted permission to these registry keys using AD Group
Policy. I've even granted permission to HKLM\Classes, HKLM\Users and
HKLM\Machine, the highelst level that can be assigned under AD Group Policy,
and made sure that the rights propagate down.

Can anyone shed some light on this?

TIA,
Ken

 

[jg]

I am not much of developer nor implementer. However I have seen something
about internet explorer treatment of activeX

If ActiveX control is the safe type and marked so, furthermore signed with a
proper certificate from appropriate authority (Verisign,,, etc), most user
can executed them at least with some minor change in IE security zones and
place your company in the appropriate zone. In this scenario, you may not
have to explicitly the activex control.register
I believe there are requirement the certificate signing ActiveX must be the
same for the website domain

try Google for some answers with site:Microsoft.com as the first part of
your search criteria